cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
137
Views
0
Helpful
0
Replies
Douglas Barker
Beginner

Cisco ISR behind or in front of Cisco ASA for Ipsec\GRE ?

I have an existing cisco ASA 5515 peering statically with our ISP and a new Cisco 4431 that we want to use as a VPN concentrator for our remote offices. The ISR is to provide Ipsec\GRE tunnels to our remote sites which have ISR's peering with their ISP's. I am not sure where the ISR should live in relation to the ASA (DMZ \ Separate Inside interface \ Infront of the ASA etc.) I have attached a diagram that illustrates how the design looks any suggestions would be appreciated. 

0 REPLIES 0