Provides an overview of Network Tunnels by Device in Cisco Secure Access, including Best Practices for Configuring Network Tunnels by Device, Configure Tunnels with Cisco Catalyst SD-WAN, and Configure Automatic Tunnels with Catalyst SD-WAN. It outlines the concepts, configuration tasks, and operational guidance presented in this chapter.

Best Practices for Configuring Network Tunnels by Device

Describes Best Practices for Configuring Network Tunnels by Device in Cisco Secure Access. You can establish an IPsec (Internet Protocol Security) IKEv2 (Internet Key Exchange, version 2) tunnel from a network device deployed in your environment to Cisco Secure Access.

Configure Tunnels with Cisco Catalyst SD-WAN

Explains the prerequisites and procedures for configuring network tunnels with Cisco Catalyst SD-WAN.

Configure Automatic Tunnels with Catalyst SD-WAN

Understand how to use Cisco Catalyst SD-WAN automation to integrate with Cisco Secure Access for branch-to-internet secure direct internet access (SIA).

Configure Tunnels with Cisco ISR

Understand how to connect a Cisco ISR-G2, ISR4K, or CSR router through both primary and secondary IPsec (Internet Protocol Security) IKEv2 (Internet Key Exchange, version 2) tunnels to Cisco Secure Access.

Configure Tunnels with Cisco Adaptive Security Appliance

Understand how to connect a Cisco Adaptive Security Appliance (ASA) firewall to Cisco Secure Access using one or two IKEv2 IPsec tunnels via Virtual Tunnel Interfaces (VTI).

Configure Tunnels with AWS Virtual Private Clouds and Elastic Compute instances

Understand how to connect AWS Virtual Private Clouds (VPCs) and Elastic Compute Instances (ECs) to Cisco Secure Access.

Configure Tunnels with VeloCloud SD-WAN

Understand how to connect VeloCloud SD-WAN to Cisco Secure Access with singular or failover network tunnel groups.

Configure Tunnels with Cisco Secure Firewall

Understand how to configure network tunnels with Cisco Secure Firewall to support site-to-site VPN between Firewall Threat Defense devices and Secure Access through Cisco Secure Firewall Management Center.

Configure Tunnels with Meraki MX

Understand the methods that you can use to configure network tunnels between your Meraki MX and Secure Access.

Enroll Meraki SD-WAN Sites with Meraki Auto-VPN Tunnels

Understand how to enroll Meraki SD-WAN sites with Secure Access using Meraki auto-VPN tunnels.

Configure Tunnels with NEC IX2000 Series Router

Understand how to configure an IPsec tunnel between an NEC IX2000 Series Router and Secure Access.

Site-to-Site VPN tunnels with Microsoft Azure

Understand how to configure an Azure site-to-site VPN tunnel between an Azure Private Network and Secure Access.

Configure a Site-to-Site VPN tunnel with Amazon Web Services

Understand how to deploy a site-to-site (S2S) VPN tunnel from Amazon Web Services (AWS) to Cisco Secure Access.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.