Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Need a VPN to terminate to another Public IP

I need to terminate a Site to Site VPN tunnel to another Public IP that is not the outside interface of my ASA, how can I achieve this?

4 REPLIES
Super Bronze

Need a VPN to terminate to another Public IP

Hi,

ASA can only use the IP address configured directly on its interface for a VPN connection.

You could naturally configure a new public subnet on another (new) ASA interface and use the "route" command to both route the remote peer IP and remote network through that interface. That way you would have 2 external interfaces with the IP addresses for VPN use and the new interface wouldnt interfere with the original external interface that holds the default route.

There are many factors that determine if this would be easy to implement. Mostly your ISP and their equipment in front of your ASA.

- Jouni

New Member

Need a VPN to terminate to another Public IP

I have control of the router between my firewall and the ISP ethernet handoff device.

Super Bronze

Need a VPN to terminate to another Public IP

Hi,

I guess there is couple of options when physically connecting the ASA and Router.

  • If you have free ports on both of the devices you could connect those and configure the public subnet between them. I am not sure did you have a small public subnet assigned from the ISP for this new purpose?
  • If you dont have free ports then your option would probably to configure one existing link as a Trunk between the ASA and Router and configure both WAN links as subinterface on each of the devices

I am not sure if you have a router with a public subnet link network both towards the ISP and your ASA or just public subnet towards ISP and private network between Router and ASA while Router is doing NAT for the ASA.

- Jouni

Hall of Fame Super Silver

Re: Need a VPN to terminate to another Public IP

If the ASA is one of the peers then you must bind the site-site VPN to its interface.

Sent from Cisco Technical Support iPad App

111
Views
0
Helpful
4
Replies
CreatePlease to create content