Solved

Cisco site to site vpn using fqdn

Posted on 2014-04-03
4
782 Views
Last Modified: 2014-07-03
Is it possible for two Cisco ASA 5500 series to do site to site vpn using FQDN instead of IP addresses? If not, any idea on how to configure automatic failover between two locations with site to site vpn, each with an ASA 5500 series, and each ASA has 2 different internet connections? Thank you.
0
Comment
Question by:alex9420
  • 2
4 Comments
 
LVL 16

Expert Comment

by:max_the_king
ID: 39977528
Hi,
you can set multiple peers in tour cryptomap: for example:

crypto map your_map 10 set peer 1.2.3.4 5.6.7.8

that way you tell asa to check for remote peer 1.2.3.4 and, in case it does not respond, it will check on ip 5.6.7.8

you can do this on any asa peer you want to get into the tunnel

hope this helps
max
0
 

Author Comment

by:alex9420
ID: 39990485
Max,
Thank you for your reply. Your suggestion will work if all the internet connections for each locations have static IP addresses, but is there any way to get it working if one of the two internet connections for each location is a dynamic IP? Sorry for not including that fact on my original post.
0
 
LVL 1

Accepted Solution

by:
pcesolutions earned 500 total points
ID: 40175565
DMVPN
0
 

Author Comment

by:alex9420
ID: 40176014
Pcesolutions,
Look like it may work. I will check it out. Thank you.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
network error 8 61
Receiving wifi on an underground station 22 130
VOIP gateways - feedback 23 73
NAT on Fortigate 2 17
When replacing some switches recently I started playing with the idea of having admins authenticate with their domain accounts instead of having local users on all switches all over the place. Since I allready had an w2k8R2 NPS running for my acc…
I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question