topic Re: Cisco Firepower 2100 in Network Security

Cisco Firepower 2100

Asfandyar70754 — Fri, 12 Nov 2021 06:48:43 GMT

Hey guys,

So one of my customer had a question regarding routing in Cisco Firepower 2100, He asked that he wanted to use one firewall where he wanted to land 2 ISPs and he wants to use both ISPs for separate traffic supposedly 2 subnet will use ISP1 and 2 subnets will use ISP 2.

Re: Cisco Firepower 2100

Karsten Iwen — Fri, 12 Nov 2021 07:22:50 GMT

You need Policy based Routing for that. Here is an example:

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/flexconfig_policies.html?bookSearch=true#Cisco_Task_in_List_GUI.dita_bc40fbd4-5a79-48ae-bf3e-34b7f8a1ec9f

Re: Cisco Firepower 2100

Asfandyar70754 — Fri, 12 Nov 2021 07:32:30 GMT

Hello Karsten,

Thank you for you response. So I would also like to know if I can configure failover for these ISPs or not?

Re: Cisco Firepower 2100

balaji.bandi — Fri, 12 Nov 2021 07:37:08 GMT

yes possible PBR is the solution to route subnet 1 go to ISP1 and subnet 2 go to ISP 2, you can also do for high availability failover if one of the ISP fails, (if that is the requirement)

Good video :

https://www.youtube.com/watch?v=MKcSBTJ55e8

Re: Cisco Firepower 2100

Karsten Iwen — Fri, 12 Nov 2021 08:07:59 GMT

For sure, you have to make sure that both ISPs can work independently and then add some route tracking (IP SLA).