I have an ASA and a load balancer (F5) that i'm trying to configure as follows and experiencing routing issues.
A load balancer with 4 ports.
Port 1 connected to ISP 1
Port 2 connected to ISP 2
Port 3 connected to ASA outside interface.
Port 4 currently not connected.
ASA default route is set to point to the IP address of Port 3 on the load balancer. This IP address is a private IP address.
I'm looking to use this same ASA for VPN. As such i want to activate port 4 on the load balancer. Port 4 will be in the address space of ISP 1. Port 4 from the Load balancer will connect to Interface 4 on the ASA. Interface 4 on the ASA has a public IP address in the space of ISP 1. Interface 4 on the ASA will thus be my VPN termination point.
When users connect to the VPN they connect to an IP address in the space of ISP 1. This traffic is then routed to ASA interface 4.
The problem occurs when users connect to the VPN. Their traffic gets dropped by the ASA as it cannot find a route back to them. The default route set on the ASA(A private IP address) points to port 3 of the LB, which is not where their traffic came from in the first place.
I hope this lengthy expl. makes sense.
Please help. Pulling hair out.