Solved: Two ISP's and Two ASA's

jheckart · ‎01-22-2008

Hello,

I have a design problem for which I believe that I already know the answer, but am looking to bounce this off of someone else.

I have an ISP which is connected to an ASA for Internet access, and am adding another ISP that will be connected to a seperate ASA for remote access VPN. I have a 2600 series in the LAN, which is the default router for the servers/PC's.

The new ISP/ASA have been purchased for VPN connectivity, but I don't see a way to do this since the 2600 points its default route through the ISP/ASA being used for Internet connectivity.

So, if someone were to VPN to this new ASA on the seperate ISP they would connect, but the default route would take them through the ASA for Internet connectivity.

Does anyone know of a way to accomplish this with two ISP's and two ASA's?

Jon Marshall · ‎01-22-2008

Hi

Could you not just add a static route on the 2600 for the client VPN pool IP addresses pointing to new ASA ?

Jon

View solution in original post

Jon Marshall · ‎01-22-2008

Hi

Could you not just add a static route on the 2600 for the client VPN pool IP addresses pointing to new ASA ?

Jon

pengfang · ‎01-23-2008

1.add a static route on the 2600 for the client VPN pool IP addresses pointing to new ASA

2.add a static route on the new ASA for the server VLAN pointing to 2600