cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
394
Views
0
Helpful
0
Replies

How to configure failover interface with site-to-site tunnels

Capture.GIF

Assume you have two ASA's:

ASA1 with primary interface 1.1.1.1 and a backup interface 2.2.2.2

ASA2 with primary interface 3.3.3.3 and a backup interface 4.4.4.4

 

Established between the two devices is a site-to-site tunnel.

Ex. ASA1 connects to public IP 3.3.3.3 and ASA2 connects to public IP 1.1.1.1 to establish the tunnel.

 

In the event the primary interface on either device is no longer accessible, how do you configure the site-to-site tunnel to re-establish on the backup interface?

Ex. ASA2's primary interface 3.3.3.3 is down and traffic begins to route via backup interface 4.4.4.4 to the internet. The site-to-site tunnel drops because interface 3.3.3.3 is no longer reachable from ASA1.

0 Replies 0