ASA VPN to Multiple IPs

[Mokhalil82]

Hi

I need to setup a site to site VPN to a 3rd party. We have an ASA 5585 HA pair, They have a Merak pair. On the 3rd party side they have provided 2 primary and 2 secondary endpoint IPs so they are using 2 subnets and may running a separate context on their Meraki firewalls.

From the ASA, do we need 2 distincts VPNS, one to each endpoint pair (primary/secondary) or can I setup a single VPN to both endpoint subnets?

[Rahul Govindan · Accepted solution]

If each pair has a distinct subnet, there would be 2 tunnels - one to each pair.