topic Re: ASA two default routes in Network Security

ASA two default routes

Mohammed.Fawzi — Sun, 17 Sep 2023 11:48:13 GMT

I have a scenario where I have 2 ISPs and they both have default route

route ISP1 0 0 1.1.1.1 1

route ISP2 0 0 2.2.2.2 2

i need network 192.168.1.0 to go out with ISP2 not ISP1

how can i do this in Cisco ASA

Best Regards,

Rob Ingram — Sun, 17 Sep 2023 11:59:10 GMT

@Mohammed.Fawzi to route a specific network out a different ISP than the default route then you will need to use Policy Based Routing (PBR). Example:- https://integratingit.wordpress.com/2020/03/01/asa-policy-based-routing/

M02@rt37 — Sun, 17 Sep 2023 12:02:15 GMT

You can configure PBR:

route-map PBR_MAP permit 10
match ip address ISP2_TRAFFIC
set ip next-hop 2.2.2.2

ACL ISP2_TRAFFIC match the traffic you want to send through ISP2 (2.2.2.2): 192.168.1.0/24.

Apply the route map to the inside interface where the traffic originates.

interface inside
ip policy route-map PBR_MAP

Mohammed.Fawzi — Sun, 17 Sep 2023 13:44:52 GMT

its worked,thank you soo much

M02@rt37 — Sun, 17 Sep 2023 14:02:05 GMT

You're very welcome @Mohammed.Fawzi.