Solved

Cisco site to site vpn using fqdn

Posted on 2014-04-03
4
802 Views
Last Modified: 2014-07-03
Is it possible for two Cisco ASA 5500 series to do site to site vpn using FQDN instead of IP addresses? If not, any idea on how to configure automatic failover between two locations with site to site vpn, each with an ASA 5500 series, and each ASA has 2 different internet connections? Thank you.
0
Comment
Question by:alex9420
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 16

Expert Comment

by:max_the_king
ID: 39977528
Hi,
you can set multiple peers in tour cryptomap: for example:

crypto map your_map 10 set peer 1.2.3.4 5.6.7.8

that way you tell asa to check for remote peer 1.2.3.4 and, in case it does not respond, it will check on ip 5.6.7.8

you can do this on any asa peer you want to get into the tunnel

hope this helps
max
0
 

Author Comment

by:alex9420
ID: 39990485
Max,
Thank you for your reply. Your suggestion will work if all the internet connections for each locations have static IP addresses, but is there any way to get it working if one of the two internet connections for each location is a dynamic IP? Sorry for not including that fact on my original post.
0
 
LVL 1

Accepted Solution

by:
pcesolutions earned 500 total points
ID: 40175565
DMVPN
0
 

Author Comment

by:alex9420
ID: 40176014
Pcesolutions,
Look like it may work. I will check it out. Thank you.
0

Featured Post

Is Your DevOps Pipeline Leaking?

Is your CI/CD pipeline a hodge-podge of randomly connected tools? You’ve likely got a tool to fix one problem & then a different tool to fix another, resulting in a cluster of tools with overlapping functionality. Learn how to optimize your pipeline with Gartner's recommendations

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question