I currently have 2 Internet links, from different carriers. Our primary link currently has our VPN connections running over it. I want to add another VPN connection over the 2nd carrier. So I have 2 cisco 5545x's(Active/Standby) with carrier 1 on the OUTSIDE interface and carrier 2 coming over the OUTSIDE_1 interface. I have a cert for vpn.mysite.com that is associated to the OUTSIDE interface. I would like to associate vpn3.mysite.com to the OUTSIDE_1. Currently OUTSIDE_1 is not carrying any traffic at this time. Users are coming in with cisco anyconnect.
Do I need to re-engineer my Firewall setup to achieve this? Is it even possible to run that over an Active/Standby configuration?
As I think of it, I think the only way to do it is to make a cluster with a master and users pointing to a VIP?
Any help would be appreciated, thanks.
sh run ssl ssl encryption 3des-sha1 aes128-sha1 aes256-sha1 dhe-aes128-sha1 dhe-aes256-sha1 rc4-md5 rc4-sha1 ssl trust-point ASDM_TrustPoint7 OUTSIDE_1 ssl trust-point vpn.mysite.com_trustpoint OUTSIDE sh run webvpn webvpn enable OUTSIDE enable OUTSIDE_1 anyconnect-essentials anyconnect image disk0:/anyconnect-win-3.1.01065-k9.pkg 1 anyconnect enable tunnel-group-list enable certificate-group-map DefaultCertificateMap 20 USER-SSL-VPN certificate-group-map DefaultCertificateMap 30 DefaultRAGroup