We're desinging a Network, for which I need some expert advise on.
We need to build two tunnels from a Remote ASA, to a Hub ASA, and a VPN Concentrator (for redundancy). Basically, we're thinking of doing an L2L VPN between the two ASAs and a Remote-Access VPN between the ASA and the VPN Concentrator.
I have the following questions:
- I'm not sure if this is a feasilbe design to being with, to have the same ASA create a Dynamic Tunnel (Remot Access) to a VPN Concentrator, and a regular L2L Tunnel to an ASA.
- If the above setup can be configured, Is there a way the Client ASA can hold the Remote Access Tunnel (to the VPN Conc.) down as long as the L2L Tunnel to the Hub ASA is up and running?
This is something which is still in the 'concept' phase, so any advice in this regard would be highly appreciated. Also please let me know if you have any other questions to further explain my scenario.
Thanks in advance!