multiple vpn tunnels to the same destination?

be04376 · ‎09-04-2007

Hi,

on side A we have 1 pix and using subnet X/24

on side B we have an asa5505and a pix using subnet Y/24, both have a different public ip address.

What would happen if I setup 2 ipsec tunnels from side A to side B, one to the pix and one to the asa?

How the pix will decide which tunnel to use for traffic to side B subnet Y/24? or will it do load balancing. Traffic from side B to A will take the tunnel of the default gw i guess.

jsivulka · ‎09-10-2007

I think the traffic from side B to A will take the tunnel of the default because Pix is designed to have ONE default route, which is usually pointed out the outside interface, with the gateway being the route connecting to your isp. All unknown routes would follow this default route and get sent to that outside router.