Backup IPSEC connection multiple remote Internet egress sites won't allow multiple any encryption domains

Hi Folks,
I have currently setup an ASA at a remote site in the middle of the USA which tunnels all traffic back to our West coast HQ to use its Internet connection.  It works great.  However, I also want to have another tunnel to our East Coast HQ to use its Internet connection should a failure occur on the West Coast.  I'm bascially using the "any" remote network as a default route to the Internet via the IPSEC VPN tunnel.
The ASA gives me a warning in ASDM if I have multiple connections setup that over lap.  I.E.  I have Local Network: 10.0.0.1  Remote Network: any.  I cannot repeat this for a different connection profile as a backup.
Is there anyway the ASA can support having multiple "any" tunnels to primary and backup sites?

Gave up and called TAC.
Its easy to setup backup peer's for IPSEC tunnels, first off, can't use IKEv2 (boo) had to go back to IKEv1, have to use keep alives.
Never could get the recommended "originate only" on the remote sites working correctly, but at "bidirectrional" worked fine, doesn't matter because I'm using a dynamic IP at the remote sites, the head ends will never initiate the VPNs (I don't have the "static IP" box checked).
Anyway, in ASDM go to Site to Site VPN section, then Advanced, create a tunnel group for each peer primary and backup.  then in the Crypto Maps section select the static entry you are working with, in the Peer settings below put the new backup peer and click add.  
Best practice is to have the remote sites use originate only and headends be answer only so the headends don't initiate the tunnels and cause a "loop"
Now to mess around with the EIGRP routing to finish this all off.  If anyone has hints let me know, my devices don't support IP SLA or else I would have been done with this already :(

Similar Messages

  • TS1398 when i connect to my two home wifi's which i have done forever my iPad will not connect to the internet or let me get mail. Any suggestionswi?

    When I connect to my two home wifi's which I have done forever my iPad will not connect to the internet ot let me get mail. Any suggestions?

    When I connect to my two home wifi's which I have done forever my iPad will not connect to the internet ot let me get mail. Any suggestions?

  • Certain web sites won't load on any browser on Macbook Pro

    Starting yesterday certain web sites won't load on any browser (Safari or Chrome). These include sites like the New England Journal of Medicine, Washington Post, and English Bulldog News. I get an error message in Safari that the server took too long to respond and in Chrome I get a connection timeout error message. I updated Adobe Flash with a clean install as I was unable to update using the standard method due to connection timeout. That restored my access to YouTube video but today it takes ~2 minutes to load a YT video. Web sites are loading fine on my phone and household PCs.
    Not sure if it is notable that my internet loading capacity has been very slow for some time. I worked with the internet company to increase the network speed but my computer has not seen benefit. No problems on the PCs in our house but my Macbook very frequently gets partially "kicked-off" the network as indicated by yellow lights seen next to the "internet" and "server" items in my Network Diagnostics utility.
    I looked at old threads and ran EtreCheck (see results copied below) as was recommended to another user several months ago, but would appreciate any thoughts about where to go from here. Could it be malware? Or just a classic case of operator error? Here are the EtreCheck "red" items extracted from the full report below:
    User Launch Agents: ℹ️
      [loaded] com.adobe.ARM.[...].plist [Support]
      [failed] com.apple.CSConfigDotMacCert-[...]@me.com-SharedServices.Agent.plist
    Internet Plug-ins: ℹ️
      Flash Player: Version: 16.0.0.235 - SDK 10.6 Cannot contact Adobe
    FULL RESULTS:
    EtreCheck version: 2.1.4 (107)
    Report generated December 17, 2014 12:02:37 PM CST
    Click the [Support] links for help with non-Apple products.
    Click the [Details] links for more information about that line.
    Click the [Adware] links for help removing adware.
    Hardware Information: ℹ️
      MacBook Pro (13-inch, Mid 2012) (Verified)
      MacBook Pro - model: MacBookPro9,2
      1 2.5 GHz Intel Core i5 CPU: 2-core
      8 GB RAM
      BANK 0/DIMM0
      4 GB DDR3 1600 MHz ok
      BANK 1/DIMM0
      4 GB DDR3 1600 MHz ok
      Bluetooth: Good - Handoff/Airdrop2 supported
      Wireless:  en1: 802.11 a/b/g/n
    Video Information: ℹ️
      Intel HD Graphics 4000 - VRAM: 512 MB
      Color LCD 1280 x 800
    System Software: ℹ️
      Mac OS X 10.7.5 (11G63b) - Uptime: 12:26:55
    Disk Information: ℹ️
      TOSHIBA MK5065GSXF disk0 : (500.11 GB)
      disk0s1 (disk0s1) <not mounted> : 210 MB
      Macintosh HD (disk0s2) / : 499.25 GB (261.25 GB free)
      Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB
      MATSHITADVD-R   UJ-8A8
    USB Information: ℹ️
      Apple Inc. BRCM20702 Hub
      Apple Inc. Bluetooth USB Host Controller
      Apple Computer, Inc. IR Receiver
      Apple Inc. Apple Internal Keyboard / Trackpad
      Apple Inc. FaceTime HD Camera (Built-in)
    Thunderbolt Information: ℹ️
      Apple, Inc. MacBook Pro
    Launch Daemons: ℹ️
      [loaded] com.adobe.fpsaud.plist [Support]
      [loaded] com.microsoft.office.licensing.helper.plist [Support]
    User Launch Agents: ℹ️
      [loaded] com.adobe.ARM.[...].plist [Support]
      [failed] com.apple.CSConfigDotMacCert-[...]@me.com-SharedServices.Agent.plist [Details]
      [loaded] com.citrixonline.GoToMeeting.G2MUpdate.plist [Support]
      [loaded] com.google.keystone.agent.plist [Support]
      [running] com.spotify.webhelper.plist [Support]
    User Login Items: ℹ️
      iTunesHelper ApplicationHidden (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
      Music Manager UNKNOWNHidden (missing value)
      Speech Startup Application (/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecogn ition.framework/Versions/A/Speech Startup.app)
      Dropbox Application (/Applications/Dropbox.app)
      Music Manager ApplicationHidden (/Users/[redacted]/Library/PreferencePanes/MusicManager.prefPane/Contents/Helpe rs/MusicManagerHelper.app)
      Spotify Application (/Applications/Spotify.app)
    Internet Plug-ins: ℹ️
      Flip4Mac WMV Plugin: Version: 2.4.4.2 [Support]
      FlashPlayer-10.6: Version: 16.0.0.235 - SDK 10.6 [Support]
      QuickTime Plugin: Version: 7.7.1
      Flash Player: Version: 16.0.0.235 - SDK 10.6 Cannot contact Adobe
      AdobePDFViewer: Version: 10.1.4 [Support]
      SharePointBrowserPlugin: Version: 14.3.2 - SDK 10.6 [Support]
      Silverlight: Version: 5.1.30514.0 - SDK 10.6 [Support]
      JavaAppletPlugin: Version: Java 7 Update 09 Check version
    User internet Plug-ins: ℹ️
      CitrixOnlineWebDeploymentPlugin: Version: 1.0.105 [Support]
    3rd Party Preference Panes: ℹ️
      Flash Player  [Support]
      Flip4Mac WMV  [Support]
      Java  [Support]
      MusicManager  [Support]
    Time Machine: ℹ️
      Time Machine not configured!
    Top Processes by CPU: ℹ️
          18% Google Chrome
          8% WindowServer
          2% SpeechRecognitionServer
          2% coreaudiod
          2% hidd
    Top Processes by Memory: ℹ️
      232 MB Google Chrome
      189 MB System Preferences
      129 MB Spotify
      86 MB Spotify Helper
      77 MB WindowServer
    Virtual Memory Information: ℹ️
      952 MB Free RAM
      4.99 GB Active RAM
      1.52 GB Inactive RAM
      1.13 GB Wired RAM
      1.02 GB Page-ins
      0 B Page-outs
    Diagnostics Information: ℹ️
      Dec 16, 2014, 11:36:19 PM Self test - passed

    Update: I ran Console upon trying to load a web site that won't load. Here are the messages from that action with any identical messages deleted:
    12/17/14 1:45:51.013 PM [0x0-0x1b01b].com.google.Chrome: [201:2311:1217/134551:ERROR:location_bar_view_mac.mm(602)] Not implemented reached in virtual void LocationBarViewMac::EndOriginChipAnimations(bool)
    12/17/14 1:45:51.000 PM kernel: Google Chrome He (map: 0xffffff8014ab4138) triggered DYLD shared region unnest for map: 0xffffff8014ab4138, region 0x7fff8a200000->0x7fff8a400000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
    12/17/14 1:46:16.515 PM [0x0-0x1b01b].com.google.Chrome: [604,1956432224:13:46:16.514831] Native Client module will be loaded at base address 0x00006a1600000000
    12/17/14 1:46:16.000 PM kernel: Data/Stack execution not permitted: Google Chrome He[pid 604] at virtual address 0x107509000, protections were read-write
    I forgot to note I have also done the obvious things like computer restart, shut down, and modem reset.

  • IPad 2 won't restore from backup or connect to the internet

    Hi,
    I'm having some trouble with a 2-month old iPad 2.  The first of which was a sudden failure to connect to the internet on wifi, despite being able to connect to the network.  Have searched extensively, I tried all the solutions I could: airplane mode on and off, forget the network and reconnect, auto-brightness off, renew the DHCP lease, reset network settings, public DNS information - everything, and nothing worked.  The only thing I can't do reset the router as I'm on a public network and don't have physical access to it. When I connect to the network, after about 5 minutes I get details of the IP address, DNS server and all that stuff.  But I can't connect to the internet or even to the network's sign-in page.
    So I thought there was nothing else for it but to do a restore.  What a mistake to make. For one thing, restoring to factory settings has done nothing for my wifi problem.  And now iTunes is unable to restore my iPad from the last backup.  It throws up an error message about not having enough hard drive space (I started off with about 7.8Gb free - and I had a lot less than that when I restored the iPad from my last iPad 1 backup when it was new). And when I quit iTunes, I have 0kb free on my hard drive.  Where has all the space gone?
    So I suppose I have 3 questions:
    Where did my 7Gb of hard drive space go and how can I get it back?
    How do I restore my iPad so that I haven't lost all of my notes, emails, calendar events and the like?
    How do I make my iPad connect to the internet again?
    I know where iTunes keeps its mobile backups on my hard drive, but I'm loathe to go in and start deleting stuff, because I would like to retrieve all the stuff I put on my iPad in 2 months of use.
    Any advice on any/all of the issues above would be greatly appreciated as my own efforts have managed to kill my iPad and do some very strange things to my laptop.
    Thanks in advance,
    Gus

    Have you installed any sort of anti virus or firewall software? Something that could be blocking the connection?
    Do you have a different cable to try?

  • Says I'm connected to the internet, but browsers won't work

    Hi everybody. Here's what happened: I was loading a program on my eMac, which was connected to the internet fine, and my mom shut the computer off. It seemed like the computer crashed--I couldn't access any of my files. So I realoaded the operating system. Most things worked OK, but I couldn't connect to the internet, and when I tried changing certain things, it asked for an administrator name and password, and wouldn't accept any of the accounts as an administrator. So I found a code the allowed me to create a new administrator, and used it; I can now finally edit my internet settings. But I can't connect. I finally got it to say I was connected in Network Status by clicking the checkmark next to AppleTalk; there's the little green light and it gives my IP address and everything. But none of my browsers will load, and Itunes can't connect either. Any suggestions?

    Welcome to Apple Discussions!
    Powering the machine down from the on/off switch typically is not recommended, because during a software shut down, some documents that are open are properly closed. What can happen is directory damage. Perhaps a key document for your Domain Nameserver got damaged. Try switching to OpenDNS DNS numbers from http://www.opendns.org/ on both your router and Network System Preferences. Restart the computer. Then it might fix the issue. Any proxy settings might need to be turned off as well.

  • Wi fi was connected to house internet,now it won't connect why?

    Wifi on in settings,will not connect to house internet, it did yesterday.?

    Try restarting your WiFi router by removing power to it for 30 seconds.

  • Firefox 4 has no sound when connected to my internet radio site

    Well i just tried to upgrade from 3.6 to 4.0 only to immediately discover this lost my ability to listen to eve radio.com. (streaming internet radio) Both FF versions had the same plugins and such enabled and up to date in particular the WMP addon, checked volume/mixer on the computer and site etc etc but gave up and uninstalled 4 and reinstalled 3.6. Not sure if its the windows media player not working with the new 4.0 or what, but i will be sticking to 3.6 until this works with the new version.

    I can not hear a local radio station ..www.dundalkfm.com.. using Firefox 4 but can pick it up with IE.
    Not only that but it is almost impossible to locate the station website using Google or any other search engine but it can be found using a backdoor route.
    Curiously a new internet radio station in the same region near Dundalk Ireland which has only begun transmission on Sunday 19-June-2011 can be picked up on Firefox 4 and already the station website can found immediately with Google.
    I KNOW beyond any shadow or question of doubt that it is purely coincidental that the same lad who set up both websites is the main man with the new radio station !!
    Is there any other possible reason or solution for this situation ????
    I have just downloaded Firefox 5 in the hope that it might change matters but I do not really think it will .
    So ..anyone out there who might be able to help ??

  • Ftp setting on Iweb say I'm connected to server but my site won't load

    I have a new server to replace the mac service . All imformation in publishing panel is correct . I am told I'm connected when I use the test button but my site will not load to server . Any ideas ?

    One thing that can cause publishing problems is spaces or special characters in file names - especially image file names.
    Until you get the problem with the iWeb FTP resolved you can always upload the local folder with an FTP app...
    http://www.iwebformusicians.com/Search-Engine-Optimization/Upload.html

  • Top Sites won't allow update (Safari 5.1)

    I cannot for the life of me add a page to my top sites.  I have two windows open: one is "Top Sites" prepped for editing, the other has the URL of the website I want to add to "Top Sites".  I highlight the desired URL and drag it over the Top Sites page, and nothing happens.  I have unpinned selections on Top Sites, I have tried dropping the URL on those, at the top of the page, at the bottom of the page, in the URL  field at the top of the window (which takes me to the page - bad).  Nothing.  What am I doing wrong?  Or, is it NOT MY FAULT?!

    From your Safari menu bar click Safari / Empty Cache.
    Restart your Mac.
    Launch Safari Try adding a page to Top Sites.
    This is for Safari 4 / Top Sites but might be help there you can use >  http://arstechnica.com/apple/guides/2009/02/safari-4-focus-top-sites-browser-in- a-nutshell.ars
    I doubt it's your fault.

  • Have original ipad which won't backup, itunes says there is an error but won't give me any details

    I have an original ipad which I struggled to update the OS software from 3.2 to 5.0 but eventually managed to do this manually.  HOwever, now there is an update to 5.1 which when I try to do it via wifi, it just says there is an error.  Tried to do it through iTunes but it starts to back up and then tells me there is an error but does not give details, when I click on the further information button it doesn't do anything.  Because it won't back up, it won't let me install the update.  It won't back up either to the computer or to iCloud, I have tried both.  I would be grateful if anyone has any ideas.
    Also, in case anyone can help - several of my apps won't work on my ipad - logo quiz, ibooks (worked fine until I updated software system) and a few others - just flicks on briefly and then throws me out.
    Thanks in advance.

    iPad: Basic troubleshooting
    http://support.apple.com/kb/TS3274
    iTunes: Specific update-and-restore error messages and advanced troubleshooting
    http://support.apple.com/kb/TS3694
     Cheers, Tom

  • 'You are not connected to the internet'...oh yes I am

    I am running a late 2007 iMac with 10.5.1. Things had all been going very smoothly but a while ago (not sure how long...maybe a month?) when using Safari and I try to access a site I get the message that I am not connected to the internet.
    There doesn't appear to any problem with my net connection as other programs carry on just fine. Also I have found that as soon as this happens if I try to visit an internal IP (e.g. my routers admin page) then it will do something that means I can access websites again. If I don't do this and just try refreshing, it often takes 6-7 refreshes before it starts working again.
    My iMac is connected via gigabit ethernet to a 5-port Netgear gigabit switch which is then connected via a 100 megabit ethernet connection to a Netgear ADSL router.
    If anyone has any suggestions to solve this I'd be grateful.
    Thanks
    -Oli

    I think I may have figured it out. I have been reading other threads all over the place and DNS kept coming up. I couldn't understand how this could be an issue, but here is what I did. In my network settings my routers IP address was set as the DNS server. This made a lot of sense, but I decided to change it. I reset the DNS server to my ISP's IP address. I then reset Safari. As soon as I did that everything started moving MUCH faster and I haven't had an error in a while (much longer than before). Email is working, iTunes, etc.
    If I encounter any problems in the very near future I will re-post. But, hopefully this has it solved.

  • My itunes will not connect to the internet for some reason,

    i can go to the itunes store but when i try to update my iphone it tells me i am not connected to the internet whats going on? anyone have any idea?

    I am experiencing this problem as well.
    I have access to the internet and can download songs from the music store but iTunes is being its usual pain in the rear and says I do not have an internet connection when I try to download any updates.
    This does not seem to be a firewall issue, at least as far as I can tell, as I have McAfee and both iTunes and iTunes Helper have Full Access in my firewall settings.
    Any help would be greatly appreciated.

  • My iPod Touch 2nd generation won't connect to the Internet

    After restoring my iPod Touch 2nd gen to factory settings because that's what iTunes advised me to do after doing the iTunes update a week ago, my iPod won't connect to the internet anymore. I was able to connect to our wifi but it won't go to any website, to iTunes, etc. I'm 100% sure the problem isn't our wifi because I'm using it right now with my laptop so it's not the wireless problem. Before restoring my iPod to factory settings iti has always worked and I never had a problem connecting it. I tried restoring it again but it still didn't work. I already also reset our router but still no luck. I wish someone could help me asap!! Thank you.

    You can try:
    - reset:
    Reset iPod touch:  Press and hold the On/Off Sleep/Wake button and the Home
    button at the same time for at least ten seconds, until the Apple logo appears.
    - Power off an then backon your router
    - Reset network settings: Settings>General>Reset>Reset Network Settings
    - The troubleshooting here:
    iPhone and iPod touch: Troubleshooting Wi-Fi networks and connections

  • CDs not importing when I am connected to the Internet

    Hi
    A friend has a new Dell PC and a new broadband internet connection (today). He can't import cds when connected to the internet but can when he disconnects. Any ideas out there which settings may be responsible?
    Nick

    Hi ,
    He says nothing happens - no messages and the cd doesnt play or import. As soon as he disconnects from the internet the disk copies and plays.
    He has set to copy and play when disk is inserted.
    He is with the ISP Pipex - not sure what software he uses to connect but I think it is there own. His OS is Windows XP SP 2.
    What happens when he tries to import the CDs? Is
    there an error message? What is the text of the
    message? What software does your friend use to
    connect to his broadband service? Has he checked
    with his ISP to see if a newer version is available?

  • How to get the ipad to connect to the internet

    My ipad 2 that i got for my birthday from my uncle has the wifi bars showing saying that it is connected to the internet but it will not go to any ofn the websites i try to go to and i tries it on my sisters ipod touch 4th gen and it wont do it either and i have absolutely no idea what to do

    Your uncal's wireless sigle may be put out by his router but his Internet is most likely down. Try restarting his router and see what happens. Also make sure that his internet line is plugged into both the router and wall. Hope tis helps.

Maybe you are looking for

  • You've been signed out (CC) related question

    I unhid the app/local files and found the naughty opm.db file, which I think I'm encouraged to delete in order to fix the CC Cloud desktop login problem ("you've been signed out.).  I am tempted to delete the opm.db file now BUT...my Photography CC p

  • How do I remove the file name extension form a 'file name' cross reference?

    I have a cross reference which is refeencing another InDesign file using the cross reference format 'file name', however it includes the file extension. Is there a way to have this extension not display? Maybe a delimiter or perhaps a differnt format

  • Can I find out how old my iphone4 is

    I would love to know how old my iPhone is

  • Using external keyboard w 10 key buttons

    I've got an A1048 keyboard connected to my MacBook Pro (it's got all my Final Cut Pro stickers on it) and the 10 key pad doesn't work. It seems like it's acting as a function key or something. When I start typing on it (out of habit), I can't enter t

  • Conversion exit alpha

    HI all i have to covert into nternal format as below. Fields     Internal format     AUFK-WAERS USER4     8.00                            INR Fields     External format     AUFK-WAERS ZUSER4     800.00                              INR how can i do it