VPN Failover with backup ISP -- ASA 55xx

[vitesse-it]

I have to implement a failover VPN via a second ISP.

ASA is set up with

int outside1 default route tracked and static IP.

int outside2 default route not tracked metric 2 and dynamic IP :-(

There is a site-2-site IPSEC VPN to a data center..

Now, the customer want to have the VPN up in failover case, too.

I can think of:

1. dyn DNS :-(

2. Easy VPN with network extension

does anybody has any expieriences either way? or other suggestions??

[husycisco]

Hello Ralf,

As far as I know, ASA does not support DDNS the way you propose. EasyVPN looks like the only option. Your client should be configured as the EzVPN server btw.

Regards

[vitesse-it]

yeah..

I did tinker a solution w/ dyndns once, don't like it, tho.

I am not happy w/ ezVPN either. It makes me so unflexible for further VPN's

Just wondering if s.b. has better ideas :-)