topic routing of two isp on firewall setup? in Network Security

routing of two isp on firewall setup?

Lost & Found — Tue, 12 Mar 2019 06:43:40 GMT

Hi,

I'm trying to setup two isp on router.

so i have two outside name as outside and outside2

1 inside.

The problem is what metric should i use so that pc2 can route to outside2. or specific assign address can route to outside 2?

from pc1 to outside is working

from pc2 to outside2 is not working.

already add nat rules & access rule.

on static routes

outside 0.0.0.0 0.0.0.0 200.1.1.2 metric of 1

outside2 0.0.0.0 0.0.0.0 200.1.1.2 metric of 5

if i change the metric of outside2 to 1 its working.

please see the attached photo.

any idea?

thanks

rodrigog — Mon, 12 Oct 2015 04:48:01 GMT

Hello Arvin,

It seems the feature you need is PBR

Please refer to the next guide for the scenario you are looking to implement

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/configuration/general/asa-general-cli/route-policy-based.html

In case you need to be able to route at the same time doing load balancing through both interfaces you may try to look into using ECMP

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/general/asa-general-cli/interface-zones.html

Regards,

Rodrigo

Lost & Found — Mon, 12 Oct 2015 10:27:07 GMT

Hi Rodrigog,

when applying PBR on router there's no command policy-route under inside interface of firewall.

thanks

rodrigog — Mon, 12 Oct 2015 12:19:22 GMT

Hello Arvin,

This feature is only supported in 9.4.1 and higher

Regards,

Rodrigo