topic Backup VPN connect in Network Security

Backup VPN connect

sclevenger — Tue, 26 Mar 2019 00:50:04 GMT

A bit frustrated and need a helping hand.

We have a client who we have a primary ASA VPN connect to a 203.x.x.x address. They have a ISP that is not the best and have issues time to time staying up.

We want to set up a backup VPN connect that will come up when the primary goes down that will be on the 74.x.x.x net. I am on 8.0.3 code and added the peer site in the ADSM and it does not drop the first one and pick up the second in the same. Don't know if it is a bug , a feature or what I though that would do does not work.

The issue is on my side, I want to use the same interface to make this work. I have seen Docs on using two interfaces via a policy but again that uses two interfaces that I do not have out bound. So to summarize, I have one outbound connection that I want to setup a primary vpn connect and that when that one goes down, a second VPN comes up to pass traffic. I posed that same question to Tac and they said they have not seen what I am looking for. Maybe I did not explain my self right. There has to be some one else with this type of issue. I am loking of a direction on how to do this. Thanks for helping me out. Frustrated.

Backup VPN connect

Julio Carvajal — Fri, 25 Jan 2013 03:47:11 GMT

Not sure if I understand,

Take a look at this:

https://supportforums.cisco.com/community/netpro/security/vpn/blog/2011/04/25/ipsec-vpn-redundancy-failover-over-redundant-isp-links

Backup VPN connect

sclevenger — Fri, 25 Jan 2013 19:23:08 GMT

Thanks for your support and responce. However this is the vers I spoke about that would require me to have two interfaces to make it work I do not have that sinario. I have only one interface to the outside world. That limits me. But there has to be a way to setup that if the 203.xxx network goes down, there is a way for a backup of the 74.x.x.x network to pick up the tunnel and work. Hope that make better sence to you now. DO you know of a way? If you need me to do a drawing for you and you think that would hep, let me know.

regards,

Stephen