Site to Site VPN routing question.

Unanswered Question
Oct 17th, 2008

I have a remote site that is normally connected to our wide area network. Their current failover solution is a ISDN BRI dialer that is not very reliable. They have a separate DSL connection to the internet. I have proposed a site to site vpn tunnel between two ASA's using their internet connection. At the remote site I can assign two default gateways to the end users, one to the wide area network and one with a higher cost to the ASA. The problem is at the main site.

I would need to add this route to the ASA 5550: "route outside 1" (this subnet is currently routed internally to my wide area network).

I will also need to change these route in my internal router: "ip route" which points to my wide area network to "ip route 10.216.85.x" which points to the ASA. Is there any way to automate this process? The route outside command in the ASA does not allow you to associate a cost with the route.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion