09-25-2007 11:12 AM - edited 02-21-2020 01:41 AM
I have a remote VPN location that I'm trying to provide a redundant connectivity solution for, here's my scenario:
Tampa has 2 separate ISP connections terminating into an ASA 5505. Philadelphia has a high speed connection terminating into an ASA 5520 cluster. I have successfully configured the backup route as described in "ASA/PIX 7.x Redundant or Backup ISP Links Configuration Example" to allow access to the secondary route when the primary fails. When this happens, I can get out to the Internet but I can't get the IPSEC traffic working over the secondary link.
My question is this: Can the ASA 5505 have 2 seperate IKE and IPSEC sessions to the ASA at the headend? If so, how is this configured?
09-26-2007 01:11 PM
Maybe this will help. Look at this document.
PIX/ASA 7.x: Simple PIX-to-PIX VPN Tunnel Configuration Example
In it is a section called Backup Site-to-Site Tunnel.
Good luck!
Andy
09-26-2007 01:16 PM
Maybe this will help. Look at this document.
PIX/ASA 7.x: Simple PIX-to-PIX VPN Tunnel Configuration Example
In it is a section called Backup Site-to-Site Tunnel.
Good luck!
Andy
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide