topic Backup IPsec tunnel to home site ASA in General Topics

Backup IPsec tunnel to home site ASA

FirstSolar — Wed, 20 Apr 2011 19:25:33 GMT

I have a remote site with a PA500 and two ISPs. I would like to have all the browsing traffic go out ISP2. I want an IPsec tunnel traffic to go through ISP1, unless ISP1 service goes down. The home site has an ASA, and I can put a second IP in it for redundancy, but I do not know how to configure the PAN500 side to do the fail over.

Re: Backup IPsec tunnel to home site ASA

pkruse — Mon, 02 May 2011 16:50:37 GMT

So long as the tunnel is up and stable it will be treated like any other interface. To route specific traffic through a given path you will be using Policy Based Forwarding (PBF).

There are several articles in the KB that can assist you in setting up PBF for your special needs, otherwise you might want to tap your local SE for implementation assistance.

~Phil