Particular Dual ISP

[andre even]

                   Hi,

Today the customer is using Internet network for establishing a VPN tunnel with a foreign agency

but now that they have added an MPLS network,

So they would like to use the MPLS network to reach the foreign agency and in case of failure

they will reuse the Internet network for the VPN tunnel.

Moreover they also want to use a Dual ISP for Internet access.

The solution is implemented on an HA  cluster of 2 x ASA  running 8.4.2.

route outside 0.0.0.0 0.0.0.0 <router internet isp1> 1

I have read with attention the document "Redundant or Backup ISP links Configuration Example".

For Internet access through both ISP's it seems to be OK

Can i use another Track ID to manage communication with the foreign agency

using the Intranet interface on the ASA as the main access and the outside 1 or 2 interfaces for the backup.

Is it realistic or do i miss sonmething.

PS: i have attached the design of what i am going to implement.

Best regards.

Andre

[Julio Carvajal]

Hello Andre,

So you mean

Send the traffic via A and if A fails go to B and if B fails go to C?

All of this via SLA monitoring ?

Yeah, I do not see why it should not work.

It is supported

For more information about Core and Security Networking follow my website at http://laguiadelnetworking.com

Any question contact me at jcarvaja@laguiadelnetworking.com

Cheers,

Julio Carvajal Segura