02-25-2014 09:48 AM - edited 03-11-2019 08:50 PM
My outside interface IP is blocked by ISP in one of the client locations , can I have them use the VPN client to send IKE request to a secondary IP on the outside interface (on the same ISP allocated LAN range).
I have ASA 5540 (8.0-3)
02-25-2014 02:30 PM
An IPSec (or SSL for that matter) VPN can only be bound to an interface address - not to another address (on the same subnet or elsewhere).
03-03-2014 10:04 AM
Siju, it could be enabled to another ip address only if you'll change the interface ip address to the new address.
if the ASA on remote address is the spoke part, then you could had a redundant ip peers configured to spoke to the hub in the central office.
had a great day.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide