ASA Stie to Stie VPN architecture

[hawkwu0503]

Our company has two IPS planning an IPS to USER using the Internet access, and the other would like to establish a branch to the branch office for the use of the company's internal services, whether both site are Cisco ASA equipment can achieve this The architecture? thanks a lot!

[Francesco Molino]

Hi 

By IPS you mean ISP? 2 internet provider link? 

You can have 2 links and keep 1 for internet and the other for vpn. 

You need to take care of nat and also add static route to reach remote sites through isp2 and have 1 default route going through isp1. 

If you give more information like remote subnet and your actual config, i can help you building the right config. 

Thanks 

PS: Please don't forget to rate helpful answers

[hawkwu0503]

Hi,

Is there a reference can refer to it?

Thanks

[Francesco Molino · Accepted solution]

Hi 

I googled it took try to found some step by step quickly and this what it looks like: 

https://www.google.ca/amp/s/oasysadmin.com/2013/06/14/cisco-asa-with-dual-isps-one-for-internet-and-one-for-vpn-example/amp/

On the forum you should be able to found posts talking about that. 

I'm on my mobile right now and can't share some configs.

Take a look at these links I've forwarded and if you're not able to do that let me know, I'll try to build you a config quickly if I've time tomorrow.

Thanks

[hawkwu0503]

Hi

Thank you for your help!

[Francesco Molino]

Thanks.
You're welcome

[Philip D'Ath]

This kind of configuration is much easier to do using Cisco Meraki MX security appliances.

https://meraki.cisco.com/products/appliances

Here is the section on load balancing and flow preferences.

https://documentation.meraki.com/MX-Z/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences