cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
268
Views
0
Helpful
1
Replies

Multiple ISP Connections, one for VPNs one everything else

joe
Level 1
Level 1

Hi

I have a network scenario exactly like the one described in this article, with one exception. http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

(i have also uploaded the network diagram from the article as an attachment)

The only difference is that i would like the second ISP connection to not be a backup, but to handle VPN connections to my other offices, while the other connection handles all other Internet traffic. Can i accomplish this with a single ASA? 5505? 5510?

Thank you in advance for your help.

1 Reply 1

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello Joe,

it should enough to :

a) add a specific static route for the VPN remote endpoint

not sure if the backup interface behaves like in routers this will keep down the second interface:

The following example configures four VLAN interfaces. The backup-isp interface only allows through traffic when the primary interface is down.

see

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/b_72.html#wp1338585

So this wouldn't allow to use the second link at the same time for the VPN and as backup of the first link

Hope to help

Giuseppe

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: