topic Thanks Kornelia, in Network Security

Cisco ASA 5512-x ISP load balancing

muhammad.ali111 — Tue, 12 Mar 2019 08:07:07 GMT

Hi,

I want to know if ASA 5512-x can perform load balancing between lets say four ISPs with failover.

This load balancing should be simultaneous and traffic should pass according to the availability of ISP link.

The scenario is that we will place this at edge and the four ISPs will be connected to this firewall and from there it should perform load balancing.

I am aware of the type of load balancing with certain ports or traffic to pass through one ISP but in this way if one fails it will not shift to the other so

we need simultaneous load balancing so can ASA do that?

Regards,

Ali

Hi Muhammad,

Terence Payet — Thu, 11 Aug 2016 11:48:56 GMT

Hi Muhammad,

ASA is not capable of doing loadbalancing.

But there is tweak which is explained in the below:

https://supportforums.cisco.com/document/59986/loadbalancing-dual-isp-asa

HTH.

Regards,

Terence

Thanks, but the trouble will

muhammad.ali111 — Fri, 12 Aug 2016 05:39:09 GMT

Thanks, but the trouble will be in case of failover. We need load balancing between 4 ISPs.

Should we go with a router and also we need reporting and monitoring?

Thank you.

Regards,

Ali

Hello Muhammed,

Kornelia Gutierrez — Fri, 12 Aug 2016 13:45:23 GMT

Hello Muhammed,

I hope you are fine, regarding your query, there is a feature called traffic zone that seems to allow load balancing between interfaces, this feature is available from ASA 9.3. Kindly please take a look on the following document:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/general/asa-general-cli/interface-zones.html#65622

Hope this helps!

Thanks Kornelia,

muhammad.ali111 — Mon, 15 Aug 2016 07:40:56 GMT

Thanks Kornelia,

Are vlans necessary for equal cost default routes for load balancing in the given example,

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/general/asa-general-cli/interface-zones.html#93480

or we can define four interfaces (ISPs) in outside zone and NAT it with 2 inside interfaces? will it perform load sharing in this scenario?

Regards,

Ali