Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Question on Dual ISP and VPN

Good Morning

I have an ASA 5505 with the Security License running 8.4 and 6.4.5 software

I have a fully working VPN solution on there using a ISP IP - works fine.

My boss wants to split the lines/bandwidth to another ISP we have coming into the office.

So what I want to acheieve if possible is this

Say my current isp is 5.5.5.5, my internal network is 192.168.2.x and my other ISP is 6.6.6.6 - is it possible to use the ASA to accept VPN clients from both ISP's and use the internal network?


Thanks in advance

2 REPLIES
Silver

Question on Dual ISP and VPN

yups...if...un false...upgrade first all funcionality...and click suport...all the point in memory...hardware and suport aplicatoin but usualy provider have a rule each other to much better contack your server...

---

Posted by WebUser Seno VanJava

Bronze

Question on Dual ISP and VPN

Are you talking about load-balancing all traffic across the two public interfaces?  If so, then no, the ASA will not perform as you expect.  You can only have 1 active default route at a time.  You can, however, do something like this:

route outside 0.0.0.0 0.0.0.0

route outside2 200.200.200.0 255.255.255.0

In this configuration, all requests from 200.200.200.0/24 would be able to establish VPN connections to the outside2 interface IP while all other soruces use the outside interface.  You will need to specify specific networks that will utilize the outside2 interface for this to work.

324
Views
0
Helpful
2
Replies