[c-nsp] ASA Multiple Context Mode

[Clue Store]

I think I read your post wrong the first time around. You're terminating the
tunnel on a router thats vrf aware and dropping the traffic on the inside of
the tunnel on a vlan that's in the same vlan as their context. Correct??

On Sun, Jul 19, 2009 at 7:01 PM, Clue Store <cluestore at gmail.com> wrote:

> Hi David,
>
> Does this mean you're terminating the ipsec tunnel on a router inside the
> vrf through the context?? I was thinking about this but wasn't sure what
> nastyness would come out of it. MTU issues, etc...
>
>   On Sun, Jul 19, 2009 at 4:39 PM, David Hughes <David at hughes.com.au>wrote:
>
>>
>> On 20/07/2009, at 4:13 AM, Clue Store wrote:
>>
>>  If it doesn't support
>>> SSL VPN, what are other folks doing for VPN's in this situation where
>>> multiple contexts are being used??
>>>
>>
>> Hi
>>
>>
>> We use a router running vrf-aware ipsec to drop users from each customer
>> into a vlan on their ASA context.  Works pretty well.
>>
>>
>>
>> David
>> ...
>>
>
>