Multiple Tunnels terminating on a ASA 5520

[Naveen Gupta]

We have 2 Cisco ASA 5520 configured as Active/Standby with public IPs 68.171.xxx.xx6 and 68.171.xxx.xx7 respectively.

We have 3 different vendors who are trying to access our Data Center. Do I have to have 3 different public IPs for these 3 different vendors? Or, just share the public IPs assigned to our 'Outside' interface? Appreciate any help on this.

Thanks!

[Richard Burts]

Naveen

You do not need a separate outside IP for each vendor. All three vendors can use the same outside interface address for their tunnel.

HTH

Rick

Sent from Cisco Technical Support iPhone App

[Naveen Gupta]

Thanks Rick. I think I understand this part. But, which outside IP address do I need to use for the tunnel. There are 2 ASA's configured as Active/Standby. Would giving just the outside IP of the Active ASA will be sufficient. How will the tunnel work if Active ASA goes down.

[Richard Burts]

Yes. Just use the outside address of the active ASA. In the event of a failover the backup actually takes over the address from the primary.

HTH

Rick

Sent from Rick Burts mobile.