Dual ISPs and two redundant VPN tunnels on ASA 5520

[Vlad Olteanu]

Hi All,

  I have a requirement which sounds like this :

  - with two ISPs( of course different public IP subnets ) I will have two firewalls on which we will have to do 2 l2l VPN tunnels.

The VPNs will have to be redundant to each other and in case one of the links is congested , the traffic should switch through the other tunnel .

Has anyone done something like this?

Thanks,

Vlad

[Javier Portuguez · Accepted solution]

Hi Vlad,

To have redundant connections I would suggest the following link:

ASA/PIX 7.x: Redundant or Backup ISP Links Configuration Example

To know when the link is congested? I do not think it would be possible at all on the ASA, perhaps with IP SLA UDP Jitter but I think it is only supported on IOS Routers.

Analyzing IP Service Levels Using the IP SLAs UDP Jitter Operation

Thanks.

Portu.

Please rate any posts you find useful.

[Javier Portuguez · Accepted solution]

Hi Vlad,

Please let me know if you have any further questions about this post, otherwise please mark it as answered.

Thanks.