OSPF over IPSEC VPN Tunnel

[Hamad.Anjum]

Dear Support,

We have two cisco ASA 5505 which want to create IPSEC VPN Tunnel with each other. Following is the requiremnt

1. One cisco ASA 5505 is placed at one site  (Remote Site)

2. Second is placed over the WAN in another city (HQ Site)

Remote site device has two WAN links i.e Fiber and VSAT. From both links , the WAN IP of HQ Site device is accessible. We want to create a VPN tunnel over the fiber between two devices which is successful. However VSAT shall be used as backup link. We want that if IPSEC VPN Goes down then traffic automatically shift to backup VSAT link.

Kindly share configurations steps for the same

[Marvin Rhoads]

There is a Cisco tech note on this scenario. It does not use OSPF but rather tracks the availability of one link and, using IP SLA feature, it changes a static route metric to change the next hop in the path between ASAs.

Please refer to the following:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118962-configure-asa-00.html