remote-access VPN on virtual outside IP

[wkamil123]

Hi,

It's possible to configure ASA on 8.2.3 release that I have dedicated IP address just for a S2S and RA VPN?

This dedicated IP address is from a pool of outside interface.

Kamil

[Jennifer Halim]

No, you can only terminate the VPN on the actual interface IP Address (ie: outside interface ip address), not any virtual ip address.

[Nagaraja Thanthry]

Hello,

VPN endpoint should be an address attached to the port. If you want, you can

dedicate the interface IP for VPN and use other IP's for all of internal

traffic.

Hope this helps.

Regards,

NT

[wkamil123]

Yes, it's possible but ASA 5510 has just 4 ethernet ports.

So it's difficult to do this with this number of ports when the failover is run between two ASA also.

Kamil