Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
219
Views
0
Helpful
1
Replies

ASA vpn with different public ip addresses

Go to solution
fpaolini
Level 1
Level 1

‎05-21-2007 06:41 AM - edited ‎02-21-2020 03:04 PM

Hi Everyone. I can't found anyone who can give me a "for sure" reply about this thing. I wish to link via vpn 2 ASA5505, called A and B. inside a we have net 10.0.0.0/24 and inside b we have net 10.0.1.0/24. now we can have 2 outside ip addresses for A (say 215.18.18.10 and 222.26.12.12) because we have 2 providers to connect to the internet. can the asa keep up 2 vpns - with same cryptomap for the inside destination) so that if the first one falls it can switch to the other vpn by itself?

can this thing be done with other cisco appliances (such as a 2800 series router?

thanks a lot

Labels:
0 Helpful
1 Accepted Solution

Accepted Solutions

Go to solution
acomiskey
Level 10
Level 10

‎05-21-2007 06:49 AM

Which are you looking to do

1. If connection to B fails then A will use secondary WAN connection to try to bring up the tunnel.

I would use the Backup ISP function for this.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

2. If connection to A fails then B will attempt to bring up the tunnel using secondary peer address.

You can define multiple peers by using crypto maps to provide redundancy

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080450b73.html#wp1042941

View solution in original post

0 Helpful
1 Reply 1

Go to solution
acomiskey
Level 10
Level 10

‎05-21-2007 06:49 AM

Which are you looking to do

1. If connection to B fails then A will use secondary WAN connection to try to bring up the tunnel.

I would use the Backup ISP function for this.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

2. If connection to A fails then B will attempt to bring up the tunnel using secondary peer address.

You can define multiple peers by using crypto maps to provide redundancy

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080450b73.html#wp1042941

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents