Virtual IP in ASA

[fatalXerror]

Hi Experts,

Good Day!

I have 2 ASAs and has 2 ISPs and this is for RA-VPN purpose which means traffic will initiate from outside. My question is, it is possible to have a VIP in the outside zone so that users from the outside will now connect to that VIP address?

Thanks

[Marvin Rhoads]

No, that's not possible in the sense you are asking.

If the two ASAs are in an HA pair they can have a single outside address for a given ISP. They don't handle multi-ISP dynamic routing very well though - policy based routing was just introduced earlier this year and has some limitations.