topic Re: Using a ASA5520 with seperate ISP's for internet and vpn acc in Network Security

Using a ASA5520 with seperate ISP's for internet and vpn access

jidesai01 — Mon, 11 Mar 2019 12:55:48 GMT

Is it possible to use a pair of ASA 5520's in Active/Standby mode with a seperate ISP for internet access and VPN access? We want to seperate Internet and VPN traffic.

Re: Using a ASA5520 with seperate ISP's for internet and vpn acc

Farrukh Haroon — Thu, 05 Jun 2008 15:57:54 GMT

What do you mean by 'VPN Traffic'? An MPLS-Based IP-VPN provided by a DSP? Or this is your WAN Intranet sort of link, on which VPNs will be terminated? Anyway both these cases are possible as long as you don't need a default route. Because the ASA cannot have two default routes pointing to two different interfaces. As you know Internet will (almost) always require the default route.

Regards

Farrukh

Re: Using a ASA5520 with seperate ISP's for internet and vpn acc

jidesai01 — Thu, 05 Jun 2008 17:08:43 GMT

By VPN traffic, I mean that we will have to seperate connections to the internet by different ISP's. One connection will be used for access to the internet (web browsing) and the second for IPSEC and SSL VPN connections to different small offices. To make this work, would I configure two outside and two inside interfaces? Are there any docs I can look at? Thanks.

Re: Using a ASA5520 with seperate ISP's for internet and vpn acc

Farrukh Haroon — Thu, 05 Jun 2008 18:04:49 GMT

Yes this can be done, please have a look at this:

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&topicID=.ee6e1fa&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc0cdf3

Regards

Farrukh