topic Cisco ASA 5510 and Multiple Outside Interfaces Problem in Network Security

Cisco ASA 5510 and Multiple Outside Interfaces Problem

amorguettat — Tue, 12 Mar 2019 07:09:48 GMT

We have an Cisco ASA 5510 firewall. There are 4 ports on it configured as 2 outside, and 2 inside.

We have two cable modems attached to the outside ports.

Our plan is to have the "inside1" port directed to one outside port/cable modem,

and the "inside2" port directed to the other outside port/cable modem.

We have been able to get the "inside1-to-outside1" setup to work but not the "inside2-to-outside2" setup (at least at the same time).

First off, is this possible? If so, what are we likely missing - some way to have a second default route for the outside2?

For this scenario to work you

Karsten Iwen — Tue, 19 Jan 2016 13:37:42 GMT

For this scenario to work you need Policy-Based Routing (PBR) which was introduced in ASA release 9.4(1) and is only available for ASA-X platforms.

Does the firewall asa 5510

amorguettat — Tue, 19 Jan 2016 14:59:45 GMT

Does the firewall asa 5510 support the "ASA release 9.4(1)" ?

How can I downolad the "ASA release 9.4(1)" ?

No, the legacy (EOL announced

Karsten Iwen — Tue, 19 Jan 2016 15:44:10 GMT

No, the legacy (EOL announced) ASAs (without -X in the name) don't run the newer software. If you really need that feature it's time for a new firewall. If the 5510 is fine from the performance, then a replacement-product could be the 5508-X. If you need some more power, the 5516-X is for you:

http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/datasheet-c78-733916.html

You can use Cisco ASA 5515-X

amorguettat — Wed, 27 Jan 2016 11:24:44 GMT

We can use Cisco ASA 5515-X ???

Yes, that's also an -X model.

Karsten Iwen — Wed, 27 Jan 2016 11:30:58 GMT

Yes, that's also an -X model. I wouldn't recommend the 5515-X nowadays. The 5516-X is only slightly more expensive, and gives you more power. If you don't need the power of the 5516-X, then the 5508-X is a good buy.

But still, the 5515-X can do that.