asa dual isp backup

[whanson]

I've seen the doci on how to set up a backup using sla but what if both

connections are pppoe?  you can differentiate the vpdn groups but not the username password that I can see.

[Nagaraja Thanthry]

Hello,

You can have two different usernames each attached to a group:

vpdn group test request dialout pppoe
vpdn group test localname test1
vpdn group test ppp authentication chap

vpdn group test1 request dialout pppoe
vpdn group test1 localname test
vpdn group test1 ppp authentication chap

vpdn username test password *****
vpdn username test1 password *****

interface Ethernet0/2

nameif outside1

security-level 0

pppoe client vpdn group test

ip address pppoe setroute

!

interface Ethernet0/3

nameif outside2

security-level 0

pppoe client vpdn group test1

pppoe client route distance 254

ip address pppoe setroute

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/pppoe.html

Hope this helps.

Regards,

NT

[whanson]

Thanks, but what is going to happen if you have two set routes. I suppose you can't use that mechanism otherwise you would have equal routes.

[Nagaraja Thanthry]

Hello,

In the examle I had posted earlier, if you notice, for the second VPDN session, I have set the route and also I have changed the metric of the second route.

pppoe client route distance

You can use this statement on the less preferred connection so that its cost is higher than the preferred connection.

Hope this helps.

Regards,

NT

[whanson]

Beautiful thanks

[whanson]

Thanks so much for your help. I decided the best approach is to define the remote site with the two providers as client to the head end that way I don't have to concern myself at all with multiple maps and whatnot. That should work perfectly.