ASA Dual VPN with routing

[bryant496]

Hey all,

So I have a small site which I have stood up with dual WAN connections. Initially installed DSL on site, but the speeds are not great to ended up with a LTE connection via a Meraki MG21E (5 times better speeds). Both connections will site to site VPN traffic back to HQ, using a tracker to monitor LTE connection before fail over.

The site itself is primarily a unmanned location except for an incident happening on site, but we have since boarded some local camera feeds via the site, which is producing a high volume of traffic.

Is there a way I could use both connections to host a VPN back to the same place and then route our CCTV subnet over the DSL line?

[balaji.bandi]

You can do below approach :

1. You can do PBR to send Certain Traffic to VPN1 and other Traffic to VPN2

2. If one of VPN Down you can fail over to other VPN with IP SLA Tracking. ( make sure you need also same mechanism available on HQ)

here is some Links for guidance to start :

https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/general/asa-94-general-config/route-policy-based.html

https://community.cisco.com/t5/vpn/dual-isp-failover-for-s2s-vpn/m-p/4094917

[bryant496]

Sorry maybe a misunderstanding.

So I have 2 internet connections (LTE and DSL), currently I have 1 site to site VPN with both interfaces in, but currently use a tracker to fail over the VPN.

So I want to know if I can have both connects in an active VPN back to the same place and then router CCTV over the DSL, but still allow site to use the LTE and track for a failover.
I wasn't sure if I can have both interfaces stand up a VPN to the same head at the same time

[balaji.bandi]

If the VPN Termination IP is different

x.x.x.x --vpn 1-- y.y.y.y.y

b.b.b.b - vpn2 - c.c.c.c