VPN and Anyconnect failover

[jonathandill76]

I have a setup with 2 FTD's- primary and secondary and 2 ISP's. When my primary ISP fails, while we still have internet access via the secondary ISP, I loose vpn access. Can you recommend a setup that if my primary ISP fails, vpn would still work and public to private NAT. Below is an example of my setup

FTD

0/0 - 100.1.1.1

0/1 - 200.1.1.1

DNS for vpn:  vpn.myjob.com - 100.1.1.1 

NAT

100.1.1.2 to private IP 172.16.4.1

100.1.1.3 to private IP 172.16.4.3

100.1.1.4 to private IP 172.16.4.4

So when my primary ISP goes down 100.1.1.1 routing will use the next failover route 200.1.1.1

Internet works going out but no vpn and web services running on  172.16.4.1 to 172.16.4.4 cannot be accessed. Any suggestions on solutions?

[Rob Ingram]

@jonathandill76 you can configure the AnyConnect profile (using profile editor) with the primary FQDN (which resolves to 100.1.1.1) and a Backup Server with the secondary FQDN (which resolves to 200.1.1.1).

Example:

For the NAT configuration, you'd need additional NAT rules and update DNS to resolve to the different IP address range 200.1.1.x.