VPN over vlan interface in Cisco ASA 5516

[davidsolermalla]

Hello, 

I need to permit acces to a local network from Internet so I'm looking for a VPN solution (site to site and  mobile devices with anyconnect). I've seen the ASA 5516 has all the features I need but I've doubts about one thing:

The firewall will be connected to Internet phisically with a Trunk port, so my public IP will be configured on a vlan interface on the firewall. 

Would it be possible to use that vlan interface as the 'outside' iface for VPNs and NAT? Or the outside interface has to be a physical port with its IP?

Thank you

[Karsten Iwen]

Yes that works. You are free to use a physical or a vlan/subinterface for any firewall interface. It's not that uncommon to have this.