topic Re: ASA Stie to Stie VPN architecture in Network Security

ASA Stie to Stie VPN architecture

hawkwu0503 — Fri, 21 Feb 2020 14:13:31 GMT

Our company has two IPS planning an IPS to USER using the Internet access, and the other would like to establish a branch to the branch office for the use of the company's internal services, whether both site are Cisco ASA equipment can achieve this The architecture? thanks a lot!

Re: ASA Stie to Stie VPN architecture

Francesco Molino — Tue, 22 Aug 2017 04:10:05 GMT

By IPS you mean ISP? 2 internet provider link?

You can have 2 links and keep 1 for internet and the other for vpn.

You need to take care of nat and also add static route to reach remote sites through isp2 and have 1 default route going through isp1.

If you give more information like remote subnet and your actual config, i can help you building the right config.

Thanks

PS: Please don't forget to rate helpful answers

Re: ASA Stie to Stie VPN architecture

hawkwu0503 — Thu, 24 Aug 2017 03:26:30 GMT

Hi,

Is there a reference can refer to it?

Thanks

Re: ASA Stie to Stie VPN architecture

Francesco Molino — Thu, 24 Aug 2017 03:32:54 GMT

I googled it took try to found some step by step quickly and this what it looks like:

https://www.google.ca/amp/s/oasysadmin.com/2013/06/14/cisco-asa-with-dual-isps-one-for-internet-and-one-for-vpn-example/amp/

On the forum you should be able to found posts talking about that.

I'm on my mobile right now and can't share some configs.

Take a look at these links I've forwarded and if you're not able to do that let me know, I'll try to build you a config quickly if I've time tomorrow.

Thanks

Re: ASA Stie to Stie VPN architecture

Philip D'Ath — Thu, 24 Aug 2017 04:17:59 GMT

This kind of configuration is much easier to do using Cisco Meraki MX security appliances.

https://meraki.cisco.com/products/appliances

Here is the section on load balancing and flow preferences.

https://documentation.meraki.com/MX-Z/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences

Re: ASA Stie to Stie VPN architecture

hawkwu0503 — Fri, 25 Aug 2017 00:01:25 GMT

Thank you for your help!

Re: ASA Stie to Stie VPN architecture

Francesco Molino — Fri, 25 Aug 2017 00:04:20 GMT

Thanks.
You're welcome