cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
562
Views
0
Helpful
2
Replies

Question on Dual ISP and VPN

galicksosc
Level 1
Level 1

Good Morning

I have an ASA 5505 with the Security License running 8.4 and 6.4.5 software

I have a fully working VPN solution on there using a ISP IP - works fine.

My boss wants to split the lines/bandwidth to another ISP we have coming into the office.

So what I want to acheieve if possible is this

Say my current isp is 5.5.5.5, my internal network is 192.168.2.x and my other ISP is 6.6.6.6 - is it possible to use the ASA to accept VPN clients from both ISP's and use the internal network?


Thanks in advance

2 Replies 2

fb_webuser
Level 6
Level 6

yups...if...un false...upgrade first all funcionality...and click suport...all the point in memory...hardware and suport aplicatoin but usualy provider have a rule each other to much better contack your server...

---

Posted by WebUser Seno VanJava

Patrick0711
Level 3
Level 3

Are you talking about load-balancing all traffic across the two public interfaces?  If so, then no, the ASA will not perform as you expect.  You can only have 1 active default route at a time.  You can, however, do something like this:

route outside 0.0.0.0 0.0.0.0

route outside2 200.200.200.0 255.255.255.0

In this configuration, all requests from 200.200.200.0/24 would be able to establish VPN connections to the outside2 interface IP while all other soruces use the outside interface.  You will need to specify specific networks that will utilize the outside2 interface for this to work.