cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2645
Views
4
Helpful
10
Replies

Anyconnect mobile vpn with dual ISP

Hi Support Team,

Now my customer have bought 2 ASA5525-X to use at HQ site and DR site. They want to do anyconnect mobile vpn on both device. Support Team can see attached file for more detail. I need the immediately respone.

Thanks in advance!!!!

Regards,

image.jpg

Hi support team,

thanks for your quick respone.

My question is how to configure

Anyconnect mobile vpn with dual ISP at HQ site?

and if both ISP at HQ down, so it will automatic go to DR site.

Could you help me for this?

Thanks in advance!

Regards,

Message was edited by: so theng

3 Accepted Solutions

Accepted Solutions

Hello,

I can refer to the first options by using SLA monitoring and tracking (ofcourse you will need to enable Webvpn on both interfaces.

Use this link for the SLA,Tracking config

https://supportforums.cisco.com/community/netpro/security/vpn/blog/2011/04/25/ipsec-vpn-redundancy-failover-over-redundant-isp-links

Of course they are using IPSec, just change the VPN setup to Anyconnect and you will be done.

I dont think the last option or request can be done bud

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

Hello,

First of all, remember to rate all of our helpful posts

Now, here is the configuration examples:

Anyconnect

http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect20/administrative/guide/admin5.html

SLA

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

Now for the reroute-option to the other office we could Use optimal gateway selection or a server list (but you will need to manually select the ASA that you want to connect to).

https://supportforums.cisco.com/docs/DOC-15326

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

Hello,

Hey So Theng,

It's always a pleasure to help .

After you have tested let us know and if working please mark it as answered.

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

10 Replies 10

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

What is the question????

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi support team,

thanks for your quick respone.

My question is how to configure

Anyconnect mobile vpn with dual ISP at HQ site?

and if both ISP at HQ down, so it will automatic go to use ISP3 at DR site.

Could you help me for this?

I really need your help.

Thanks in advance!

Regards,

Hello,

I can refer to the first options by using SLA monitoring and tracking (ofcourse you will need to enable Webvpn on both interfaces.

Use this link for the SLA,Tracking config

https://supportforums.cisco.com/community/netpro/security/vpn/blog/2011/04/25/ipsec-vpn-redundancy-failover-over-redundant-isp-links

Of course they are using IPSec, just change the VPN setup to Anyconnect and you will be done.

I dont think the last option or request can be done bud

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi support team,

I'm very very thanks so much for your quick support. I have already seen your link and see some config in that. You know I'm new to next generation firewall 5525-X series and also new to anyconnect mobile vpn. So I think that this document mayby not help me alot. Could you help me provide more document about sample config anyconnect mobile vpn by using dual ISP?

Your help is very usefull to me.

I'm waiting your respone.

Thanks in advance.

Regards,

Hello,

First of all, remember to rate all of our helpful posts

Now, here is the configuration examples:

Anyconnect

http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect20/administrative/guide/admin5.html

SLA

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

Now for the reroute-option to the other office we could Use optimal gateway selection or a server list (but you will need to manually select the ASA that you want to connect to).

https://supportforums.cisco.com/docs/DOC-15326

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi Support Team,

I'm very very so thanks to you. I will do as your guide for my implementation.

I will let you know about my implementation later wether it is 100% correct or have some issue while doing configuration.

your help is very helpful to me!!!!!!

Thanks,

Regards,

Hello,

Hey So Theng,

It's always a pleasure to help .

After you have tested let us know and if working please mark it as answered.

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Dear Julio Carvajal,

Now I have completed my configuration on anyconnect vpn, It is Ok now. I'm very much thanks for your help.

Thanks,:)

Best Regards,

Sotheng

Hello,

Awesome news

Thanks

Looking for some Networking Assistance? 
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi, what´s the correct configuration for do this anyconnect?

 

Thanks

DP

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: