We are deploying Cisco ASA FTD firewalls and each site has dual internet with static IPs. We are wanting to create a VPN between the sites with the ability to failover to the backup internet. We have an ASA-5508-X at the main location, and ASA-5506-X at the remote sites. We will need both WAN interfaces to be endpoints for the other firewalls, and both interfaces able to create a VPN to the other sites in the event that the primary ISP goes down.
In ASDM models, this was simple to set up by adding 2 gateways to the IPSEC tunnel, and creating an IPSEC tunnel on each WAN interface for initiators.
We are running 6.2.3.2
