VPN Failover

[hs08]

I have cisco asa with 2 security context, each context connected to different internet connection. I also have VPN profile for each context.

In this condition when the internet connection on context-1 is down, we must switch the VPN profile in the client. Is there any way how we can use single VPN profile but can connect to 1st profile first then switch to the 2nd if 1st internet connection is down?

trying to create two multiple A record in the DNS but no helping.

[Giuseppe Larosa]

Hello @hs08 ,

the   ASA with  multiple contexts   =   ASA partitioning  in  logical devices.

VPN   profile   do  you mean  RA VPN,  Cisco  anyconnect   ?

if  so  each context needs to  be able to reach an   LDAPserver  or  Radius Server

making switchover for  RA  VPN between contexts is  not recommended.

you need also   dynamicDNS    and   each  user  has  to specify the AD  domain

so remote   user must  log  using:

user:      <ADdomain-name>\username

password: password

the  dyndNS  entry  will take  care of public IPv4 address change

DUO  can be used for  providing multifactor  authentication MFA

Hope to help

Giuseppe