Showing results for 
Search instead for 
Did you mean: 

Site to site with load balencing


We have a setup like the attachment,

my primary switch for vlan 170 ( directly connected with Router 2600 and internet working perfactly. and for other subnets (vlan 180,190,200,160) is other switch which is directly connected to firewall so internet for other subnet is working perfactly no problem in this.

we have run a site to site ASA to ASA for all the subnets.( given a route for on switch 1 to go via firewall.

now actual problem start, if we have establish a site to site on router differently for 170 subnet and then internet or tunnel goes down then how this traffic will divert on ASA, how 170 subnet will be able to access remote subnet.

Thanks in advance

1 Reply 1

Jennifer Halim
Cisco Employee
Cisco Employee

You can't configure the same subnet going to the same remote ASA because the ASA will not know whether to send the traffic to the router or the ASA.

What you can do is to configure 1 site-to-site VPN tunnel, with 2 set peer (router as the first peer and ASA as the second peer).

you would need to run dynamic routing protocols to divert the traffic to go to the ASA if your router is down.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers