Anyconnect to Head Office and IPSEC Tunnels to branches - How to route VPN Connection

[DON BROWN]

We currently have C1111 router with IPSEC tunnels to other branches.

ASA is being implemented behind router to provide Anyconnect VPN connections.

We are wanting to have all VPN connections established to the Head Office ASA and provide access to the branches using the IPSEC tunnels.

I am looking for an example of how to achieve this.

Also should I leave the tunnels terminating on the C1111 router or should I move the tunnels to the ASA ?

Thanks for any suggestions.

[DON BROWN]

We currently have C1111 router with IPSEC tunnels to other branches.

ASA is being implemented behind router to provide Anyconnect VPN connections.

We are wanting to have all VPN connections established to the Head Office ASA and provide access to the branches using the IPSEC tunnels.

I am looking for an example of how to achieve this.

Also should I leave the tunnels terminating on the C1111 router or should I move the tunnels to the ASA ?

Thanks for any suggestions.

[balaji.bandi]

It all depends on the requirement, if the Router just connects to the WAN connection, i would advise taking advantage of ASA for VPNs again- you need to look at the load and kind of performance ASA kit you have can able to take up all and Licenses.

[DON BROWN]

Thanks

ASA is FP1120 with licensing for IPSEC and AnyConnect

Router is C1111-K9.

Looking for example where AnyConnect VPN connects and then accesses remote
site over IPSEC tunnel

Thanks Don

[balaji.bandi]

Looking for example where AnyConnect VPN connects and then accesses remote
site over IPSEC tunnel

You need to allow remote access VPN subnet to site to site VPN ACL to allow high level.