[c-nsp] how to make ASA vrf-aware / remote-access client VPN

[Seth Mattinen]

Peter Rathlev wrote:
> On Mon, 2009-11-02 at 15:04 -0500, Ryan West wrote:
>>> * decrypted traffic handled by "black box" (in this case catalyst-
>>> 3750
>> I've had very poor performance using the 3750 for PBR functions, have
>> you tried to push any load through it?
> 
> We're using a couple of 3560s for PBR with no problems forwarding 100
> Mbps+. There's no CPU load from the forwarding itself. We haven't tried
> actually pushing it yet but are planning to try sometime soon.
> 
> The 3560 needs the "routing" SDM template for this to work; I guess the
> 3750 also needs this.
> 

As fas as I've heard, the 3560 and 3750 are basically the same thing
with the major difference being the stacking ports on the 3750. The NME
etherswitch modules also identify as a 3750.

~Seth