Cisco Cisco ASA for Nexus 1000V Series Switch 技术手册

下载
页码 34
Go to the Network tab.
The CAS is typically configured such that the untrusted interface is connected to a trunk port with
multiple VLANs trunked to the port. In such a situation, the management VLAN ID is the VLAN ID
of the VLAN to which the IP address of the CAS belongs.
4. 
Check Enable Layer 3 support in order to allow users to be more than one hop away from the CAS.
Since this case is a VPN configuration, you need to enable this option.
5.