ASA VPN

[cisco.13]

Hello,
I have a problem with my LB VPN, until today everything was working correctly, but today I have a certificate problem, https//:fqdn redirects to an https://IP (ip membre), any idea?
the certificate is valid
Thank you

[MHM Cisco World]

LB meaning load balance ?

MHM

[Kasun Bandara]

@cisco.13 hi, can you explain more about your scenario with small diagram. as per your explanation its related to LB. (i assume its Load balancer) if so we need to know how your traffic terminated at ASA for VPN and where is the gateway IP configured for the VPN clients.

[cisco.13]

Hello, 
opensdns is not available!
https://support.opendns.com/hc/en-us/articles/27951404269204-OpenDNS-Service-Not-Available-To-Users-In-France-and-Portugal
workaround:
https://community.cisco.com/t5/security-knowledge-base/asa-vpn-load-balancing-clustering-with-digital-certificates/ta-p/3116616
Thanks

[tvotna]

Right, that's why it's always recommended to configure "name"s of all cluster members on all cluster units.

[cisco.13]

No, this is a workaround. You need to set a functional DNS server; otherwise, you will encounter other problems, such as license renewal issues