topic Will, please refer to this in Network Security

Dual ISP's ASA

Will Phinney — Tue, 12 Mar 2019 05:33:38 GMT

Good evening everyone,

I'm looking into doing a design using a pair of ASA's on my edge with two differernt ISP's for failover, active/standby. The ASA's would be my edge devices with no other routers nor will I be running BGP. I've setup ASA's using single ISP's and have even used redundant ISP's using BGP to the edge, but never done a pair of ASA's with redundant links. Has anyone done this? Thanks in advance!

Hi Will,you may want to look

Ferdinand Guasque — Thu, 26 Feb 2015 15:43:00 GMT

Hi Will,

you may want to look into this link for more information on the config for setting up ASA as a failover

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/ha_failover.html

Hope this helps!

Will, please refer to this

Marvin Rhoads — Thu, 26 Feb 2015 21:24:09 GMT

Will, please refer to this configuration technote.

In a nutshell, the current capability of the ASA limits you to tracking the reachability of one ISP and failing over to the second in the event of connectivity failure.

ASAs cannot (currently) do policy based routing. It may be a feature in future releases; but for now you're limited to the method described in the above link.