Hi All,
I work for an MSP, where we host virtual environments for customers, and each customer is hosted behind a dedicated virtual ASA, which we then build IPSEC tunnels from whatever device they have in their office, to the ASAv in our data center.
One customer wanted the VPN to their corp office to use 0.0.0.0/0 as the remote subnet. So our side of the tunnel is 192.168.1.0/24 and their side is 0.0.0.0/0. Yes, this has caused all the problems you can imagine it would. They would now like us to add a second tunnel to a different endpoint, and terminates to a specific network, 10.1.1.0/24.
Is there a way to set this up without changing the first tunnel to be specified networks? Is there a way to put in route statements, or prioritize which tunnel gets used first? I've had the discussion with the customer many times about terminating to 0.0.0.0/0 everytime they complain that something doesn't work from a network or internet perspective, but they still refuse to name networks on the first tunnel, because they don't want to have to change the tunnel any time the spin up a new network or remote site on their side.
