How to force ASA to establish a VPN connection

[Tiago Reis]

Hi,

I’m implementing a vpn between 2 cisco ASA and I’m facing a basic problem. The VPN is between a static (I will call ASA A) and a dynamic IP (I will call ASA B).

My problem is: the vpn is, logically,  initiated by ASA B (this ASA will be far away from me). To establish the VPN connection I need that a device on the other site force some traffic to the VPN - lan of ASA A network. So, if the VPN is down, I cannot establish the connection from my side (the other side have dynamic IP).

Is there any command that I can put on ASA B to force it to establish the connection when the VPN is down?

Thanks in advance,

TR

[vivek srivastava · Accepted solution]

Hi Tiago,

If you design permits then you can use EEM script on ASA-B to send some dummy traffic towards LAN of ASA-A to make the VPN tunnle up.

http://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/117883-config-eem-00.html

Vivek

[Tiago Reis]

Thank you Vivek :),

Perfect! :)

Regards,

TR