We have two WAN link for our office ASA. Both WAN link has been NATed through other devices before reach ASA for VPN connection.
The following gives a basic idea how it is connected.
Internal network---ASA---corporate ASA---Primary WAN---Public Internet
|
|---Border Router---Backup WAN---Public Internet
Currently remote access VPN is working fine with Primary WAN link.
I am trying to setup VPN through Backup WAN link, but I am having some difficulties here:
1. Default route on our ASA is through Primary WAN, I have to static route any VPN traffic through Backup WAN to Border Router. I have proved that this solution works, with one problem: I need to know every single source IP address for VPN connection using Backup WAN link which is impossible.
2. Even if VPN works on Backup WAN, it will only work without split tunneling, otherwise, it will get phase 2 time exceed error.
BTW, it is 5510 and I couldn't use route-map to set next-hop for PBR.
Any suggestions?
Thanks
