ISP Load Balancing

[Mohammed Ismail Shareef]

Hi,

I have a Cisco ASA 5510 Firewall and i am using two internet connections for failover. My ISP1 is always up and has VPN's but my ISP2 will only come up when ever the ISP1 is down. I am using SLA tracking to achieve that.

I want to use ISP1 for only VPN and ISP2 for all other traffic at the same time to utilize my both connections and most importantly i have voice traffic over VPN and thats getting distrubed.

Could anyone suggest how can i achieve that.

Regards

@Mohammed

[Karsten Iwen]

1. Change your ISP-failover-config to make ISP2 the active one. When general traffic has to be processed on ISP2, then the active default-route has to point to ISP2. The default-route to ISP1 gets the higher admin distance.
2. For RA-VPN, your clients continue to point to the ASA-ISP1 address.
3. For S2S-VPN configure static routes for all remote-subnets and the remote gateways pointing to ISP1