cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
304
Views
0
Helpful
1
Replies

Multi Interface VPN

Benjamin Waldon
Level 1
Level 1

Hello Everyone,

I am looking at modifying my VPN configuration and would like a little feedback.

Above is an diagram of my network. I have a ASA5505 on the left and a ASA5510 on the right. The site to site vpn between green networks is up and running well. I have a server in the DMZ that remote clients access.

I have developed a need to connect the 10.44.0.0 /16 network to the 192.168.23.10 address.

Of course, I know that I will have to add that to the vpn configurations and built nat exception rules. I'll have to do it in a way that doesn't keep the remote clients from connecting, but if I am specific with the NAT exception, that shouldn't be an issue.

Are there any other issues that I am missing? Are there any caveats that would require the VPN to have all local subnets on the same interface?

Thanks,

1 Reply 1

Aditya Ganjoo
Cisco Employee
Cisco Employee

Hi Benjamin,

If your remote client address pool is not matching the 10.44.0.0/16 network then I do not see any issues in the setup.

Regards,

Aditya

please rate helpful posts.