Cisco ASA VPN Questions - Multiple Outside Interfaces

[amoth00011]

Hi,

I've got a couple of questions about the Cisco ASA and using 2 outside interfaces, if anyone can help it would be much appreciated! Thank you,

We want to connect a second interface to a different internet circuit, with a different IP range. This is because we are changing the internet supplier and have a lot of VPN connections terminating on the appliance, so wondered if it was possible to have 2 "outside" interfaces to slowly move connections to it?

- Is the ASA allowed more than one outside interface?

- Can VPN sessions terminate on multiple interfaces?

- Any other prevention anyone is aware of?

thanks,

[Rob Ingram]

Hi,
Yes you can have more than one outside interface and enable IPSec on it. However you can only have 1 active default route. You would need to define a /32 static route via the 2nd outside interface for each new VPN that uses the 2nd interface.

HTH

[amoth00011]

Thank you!