VPN - Geo-Location Based Traffic Management

[chlaksavery]

Hi guys,

My company has branches in 3 locations (the US, China, and Canada). I want to create a FULL-TUNNEL VPN for users who connect from coffee shops, airports, and hotels.

I will do it using the Cisco profile editor and call it a UNSECURED VPN profile.

My question is: Instead of creating 3 profiles for the US, Canada, and China, is there a way to redirect the user to the correct VPN profile depending on where the user connects?

For example, the user is connecting from China > connect to the China FULL-Tunnel VPN

My Devices: Cisco FMC / Cisco FTDs

Thanks, folks

[Kanan Huseynli]

Hi,

use public hostname for VPN and configure DNS that it returns separate IP based on client location.