topic Load Balancing on FPR-1010 in Network Security

Load Balancing on FPR-1010

kostasthedelegate — Fri, 27 Nov 2020 08:22:43 GMT

Hello,

I have a FPR-1010 with ASA 9.13

I have two ISPs and I would like to use them simultaneously to benefit from the aggregated bw.

How will I accomplish that?

Regards,

Konstantinos

Re: Load Balancing on FPR-1010

Rob Ingram — Fri, 27 Nov 2020 08:42:04 GMT

@kostasthedelegate

Never tried it but - "You can assign multiple interfaces to a traffic zone, which lets traffic from an existing flow exit or enter the ASA on any interface within the zone. This capability allows Equal-Cost Multi-Path (ECMP) routing on the ASA as well as external load balancing of traffic to the ASA across multiple interfaces"

Reference here:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa913/configuration/general/asa-913-general-config/interface-zones.html

Re: Load Balancing on FPR-1010

kostasthedelegate — Fri, 27 Nov 2020 09:06:07 GMT

Thanks a lot @Rob Ingram

I will try it and update!!

Re: Load Balancing on FPR-1010

kostasthedelegate — Fri, 04 Dec 2020 07:18:47 GMT

Hello,

I tried yesterday to create a traffic zone. I had two interfaces. The one had a RA VPN and could not be assigned in the zone. In addition, when the zone was created the static route I had disappeared (I got a warning).

I have two questions

How could I combine the VPN with the traffic zone?

How the routing will be set after the zone with the two interfaces?

Regards,

Konstantinos

Re: Load Balancing on FPR-1010

kostasthedelegate — Mon, 07 Dec 2020 09:01:22 GMT

Hello,

Unfortunately, There is VPN configured on one interface so I cannot create a zone.

Is there any other way to implement load balancing between ISPs?

Regards,

Kostantinos