We help IT Professionals succeed at work.

Load Balancing in EasyVPN

ashraf2002
ashraf2002 asked
on
Medium Priority
663 Views
Last Modified: 2012-05-11

Hi..,
I have a scenario that i need to create EasyVPN Client load balancing with a cisco ASA 5505 and 2 ADSL modems.
Scenario:
A cisco ASA 5510 FW is kept as EasyVPN Server in Head Office. there are two other sites , there cisco ASA5505 FW is kept as vpnclients.
Now in each site i need to add extra ADSL Modem with a new line. i.e there will be one FW and two internet lines. How can I balance the load of VPN traffic in these two lines by dividing users ( IP ) into two IP pools.

There will not be any change in Head office. Only one internet line will be used.

please adviseā€¦
Comment
Watch Question

CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
Les MooreSr. Systems Engineer
CERTIFIED EXPERT
Top Expert 2008

Commented:
You cannot do it. The ASA will not load-balance over dual ISP lines, and only one VPN tunnel will be established. You can do redundant, failover VPN, but not load-balancing.

Author

Commented:
Ok.. thats fine..

since the FW is in routed mode , can i use 2 interfaces as outside ( lets say outside1 and outside2 ). then create vpn tunnel in each.

Now lets forget about Load Balancing... instead we will classify the users in two groups ( IP pools ) and each will be routed to Outside interfaces... like group A will take outside1 path and Group B will take outside2 path.

is it possible to configure like this..?
Sr. Systems Engineer
CERTIFIED EXPERT
Top Expert 2008
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Author

Commented:
OK.. so what would you recommend for this scenario...

Author

Commented:
Should i have a seperate FW.. for each line..?? or is it possible with contexts.. ??

Author

Commented:
It was good...
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.