cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
271
Views
0
Helpful
4
Replies

Need a VPN to terminate to another Public IP

Steven Williams
Level 4
Level 4

I need to terminate a Site to Site VPN tunnel to another Public IP that is not the outside interface of my ASA, how can I achieve this?

4 Replies 4

Jouni Forss
VIP Alumni
VIP Alumni

Hi,

ASA can only use the IP address configured directly on its interface for a VPN connection.

You could naturally configure a new public subnet on another (new) ASA interface and use the "route" command to both route the remote peer IP and remote network through that interface. That way you would have 2 external interfaces with the IP addresses for VPN use and the new interface wouldnt interfere with the original external interface that holds the default route.

There are many factors that determine if this would be easy to implement. Mostly your ISP and their equipment in front of your ASA.

- Jouni

I have control of the router between my firewall and the ISP ethernet handoff device.

Hi,

I guess there is couple of options when physically connecting the ASA and Router.

  • If you have free ports on both of the devices you could connect those and configure the public subnet between them. I am not sure did you have a small public subnet assigned from the ISP for this new purpose?
  • If you dont have free ports then your option would probably to configure one existing link as a Trunk between the ASA and Router and configure both WAN links as subinterface on each of the devices

I am not sure if you have a router with a public subnet link network both towards the ISP and your ASA or just public subnet towards ISP and private network between Router and ASA while Router is doing NAT for the ASA.

- Jouni

Marvin Rhoads
Hall of Fame
Hall of Fame

If the ASA is one of the peers then you must bind the site-site VPN to its interface.

Sent from Cisco Technical Support iPad App

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: