Re: SSL VPN-IP Address

In the 8.2 index look up load balancing. RRI would not be necessary
with a single node assuming you took other measures. Although in that
case the only feature you get is a virtual ip. Honestly I've not
worked with that feature either, but know of it's existence. So trust
the documentation more than me.

On Apr 23, 2010, at 11:56 AM, Ryan West <rwest_at_zyedge.com> wrote:

> Paul,
>
>> -----Original Message-----
>> Sent: Friday, April 23, 2010 11:02 AM
>> To: sairam
>> Cc: Cisco certification; Cisco certification; Cisco certification
>> Subject: Re: SSL VPN-IP Address
>>
>> I think the only way this could work is by configuring the ASA like
>> it
>> was part of a VPN cluster, excluding the address from nat, then
>> specifying it as the cluster ip address. You may also want to
>> specify
>> this new ip address as the URL for the ssl VPN. The real ip might
>> continue to accept connections, I've not tried this.
>>
>
> That's an interesting idea and a feature I wasn't really aware of.
> With clustering enabled, do you need to leverage RRI to get the
> client VPN traffic back to the proper ASA? I would think so, I
> didn't really see a way to create a clustered address on the
> inside. Does it support all VPN connections; L2L, Web, and
> EasyVPN? I am able to find configuration examples for the feature,
> but not in the regular configuration guide, at least not for 8.2.
>
> Thanks,
>
> -ryan

Blogs and organic groups at http://www.ccie.net
Received on Fri Apr 23 2010 - 12:29:40 ART