site-to-site and internet browsing

[srdjankatic]

Hi,

i have simple question. We need to purchase two asa5000 appliances and connect them via fixed site-to-site tunnel. One side will be using ADSL modem in bridge mode. My plan is to use PPPoE auth on asa wan port. Also, it is important to allow users in each office to use internet (browsing) through same port/IP we will be using for setting up a tunnel. As i recall this is possible, route will route them to each other and IPSec rule will protect only site to site traffic. Traffic from each location to internet will not be IPSec protected and will use default route?

Is this possible, theoretically at least?

also will the tunnel  drop occasionally on ADSL side since IP is static but from DHCP (allways gets same IP from DHCP)

tnx

[Jennifer Halim · Accepted solution]

Absolutely possible, you can have site-to-site VPN and use the same interface ip address for browsing to the internet.

If it's getting the same IP all the time, then no, tunnel should not drop.

[srdjankatic]

Big tnx!