Hi Kamran, Yes, it's possible to create an IPSEC tunnel between a VRF -enabled router on the one side, and an ASA on the other side. Think, for example, of a service provider where you have an IOS router as ezvpn server in the datacenter and asa's (5505 for example, but in a lab a 5510 would do as well) as client device at the customer site.
So yes, it's possible (actually the asa doesn't know anything about the vrf on the other side, you just configure it the same way as normal, the IOS router you need to specify which VRF the traffic would come into).. HTH PJ On 25 jul 2010, at 11:34, Kamran Shakil wrote: > > Dears, > > I have while studying found that question in security ccie lab, might come > with IOS based IPSEC VPN with VRF theme. > > Well,i think ASA does not take or accept VRF command and VRF is only > available on routers or l3switches i guesS(correct me if i am wrong ! ) > > If all is correct above, then ..... is it possible to make IPSEC VPN between > VRF config of IOS Router to ASA Firewall 8.x in the lab ????? > > Please do reply, since this is a question that i just pondered while reading > updates on forums.... > > > Awaiting.... > > Kamran. > > > > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com --- Nefkens Advies Enk 26 4214 DD Vuren The Netherlands Tel: +31 183 634730 Fax: +31 183 690113 Cell: +31 654 323221 Email: [email protected] Web: http://www.nefkensadvies.nl/
<<inline: green.gif>>
Think before you print.
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
