Solved

Cisco ASA - configure backup L2L tunnels on backup Internet link

Posted on 2016-11-07
3
46 Views
Last Modified: 2016-11-14
We have a core network that has L2L tunnels with several spokes. Several spokes are 8.4 or higher and one spoke is 8.2.5.

The core has a backup Internet link -- let's call it Backup. Goal is to maintain L2L tunnels to the spokes if the primary internet on the core goes down.

On the core side, I've configured NAT to the (inside,Backup), and an access list to allow Backup_access_in.

On the spoke side, I've configured additional tunnel groups to the Backup on the Core. What else is required? Additional crypto maps?
0
Comment
Question by:d4nnyo
  • 2
3 Comments
 
LVL 16

Accepted Solution

by:
max_the_king earned 500 total points
ID: 41878326
Hi,
yes, on the spokes you need to add crypto map as well, not only tunnel groups.
Please note that you can add the backup public IP into each crypto map that already exists for the main site.
For example, on each spoke:
old crypto map:
crypto map outside_map 20 set peer 1.2.3.4
new crypto map:
crypto map outside_map 20 set peer 1.2.3.4 5.6.7.8

hope this helps
max
0
 
LVL 1

Author Comment

by:d4nnyo
ID: 41879303
Thanks. Is it better to re-creat existing crypto maps? Or add new ones?
0
 
LVL 16

Expert Comment

by:max_the_king
ID: 41879306
It must be The same crypto map. You may as well update the existing one.
max
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Overview The Cisco PIX 501, PIX 506e, ASA 5505 and ASA 5510 (most if not all of this information will be relevant to the PIX 515e but I do not have a working configuration handy to verify the validity) are primarily used within small to medium busi…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

806 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question