Suggested simpler VPN technology supported with ASA1100's?

[jmaxwellUSAF]

Hello.

The enterprise is replacing DMVPN routers with ASA1100's. ASAs do not support DMVPN.

QUESTION: Must the DMVPNs be replaced with cumbersome-to-erect site-to-site IPsec tunnels, or is there a suggested simpler VPN technology supported with ASA1100's?

Thank you.

[Rob Ingram · Accepted solution]

@jmaxwellUSAF dVTI on the hubs and sVTI on the spokes are supported using FTD or ASA image, you can then run a dynamic routing protocol over the tunnels, which is less cumbersome to manage than a crypto map policy based VPN.  This mirrors DMVPN for Hub and spoke routing but Full Mesh (spoke-to-spoke) is not supported.

https://secure.cisco.com/secure-firewall/v7.3/docs/dynamic-virtual-template-interface-dvti