Hi all,

Here's the scenario...

I have two ISPs (L3 and XO) each connected to it's own 3925E.  Currently, I'm only receiving the default route from the ISPs.  We essentially dedicate our L3 connection for Inbound traffic (e.g. Website hosting) and, the XO connection for outbound traffic (e.g. Internet browsing).  We also currently terminate our Cisco VPN clients to a pair of ASA5520s hosted on the XO connection.  We'd like to migrate those clients to a pair of ASA5550s and utilized the L3 connection.  On the ASA5550s, I have an interface on the L3 subnet and an interface on the XO subnet.  But, the default route on this ASA5550 pair points to the 3925E on the XO connection.  The challenge is, how can I terminate Client IPSec tunnels to the L3 interface if the default gateway is pointing to XO.  This asymetric routing will not allow phase I to establish.  I have a feeling I can get around this with policy based routing or, Firewall context...but, looking for ideas at the moment!

Thanks,

Jay

Best of knowledge!