cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
536
Views
0
Helpful
2
Replies

Backup VPN connect

sclevenger
Level 1
Level 1

A bit frustrated and need a helping hand.

We have a client who we have a primary ASA VPN connect to a 203.x.x.x address. They have a ISP that is not the best and have issues time to time staying up.

We want to set up a backup VPN connect that will come up when the primary goes down that will be on the 74.x.x.x net. I am on 8.0.3 code and added the peer site in the ADSM and it does not drop the first one and pick up the second in the same. Don't know if it is a bug ,  a feature or what I though that would do does not work.

The issue is on my side,  I want to use the same interface to make this work. I have seen Docs on using two interfaces via a policy but again that uses two interfaces that I do not have out bound.   So to summarize, I have one outbound connection  that I want to setup a primary vpn connect and that when that one goes down, a second VPN comes up to pass traffic. I posed that same question to Tac and they said they have not seen what I am looking for. Maybe I did not explain my self right. There has to be some one else with this type of issue. I am loking of a direction on how to do this. Thanks for helping me out. Frustrated.

2 Replies 2

Julio Carvajal
VIP Alumni
VIP Alumni

Not sure if I understand,

Take a look at this:

https://supportforums.cisco.com/community/netpro/security/vpn/blog/2011/04/25/ipsec-vpn-redundancy-failover-over-redundant-isp-links

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Thanks for your support and responce. However this is the vers I spoke about that would require me to have two interfaces to make it work  I do not have that sinario. I have only one interface to the outside world. That limits me. But there has to be a way to setup that if the 203.xxx network goes down, there is a way for a backup of the 74.x.x.x network to pick up the tunnel and work. Hope that make better sence to you now. DO you know of a way?  If you need me to do a drawing for you and you think that would hep, let me know.

regards,

Stephen

Review Cisco Networking for a $25 gift card