topic Re: Cisco ASA 5510 two ISP actives in Network Security

Cisco ASA 5510 two ISP actives

SupportAC — Mon, 12 Aug 2019 10:18:32 GMT

Hello,

I have a Cisco ASA 5510 with firmware 8.2(5)57.

I am going to change our ISP provider but in the meantime I want to have both active. Is there any way to have two ISP providers actives at the same time?

Re: Cisco ASA 5510 two ISP actives

Ben Walters — Mon, 12 Aug 2019 12:44:25 GMT

Yes, this is possible, you can connect each ISP router to a different interface on the firewall and then use SLA to monitor the routes in the event of a failure.

This guide here is a good place to start and I think it still applies to 8.2

https://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/70559-pix-dual-isp.html

Otherwise have a look at the SLA section of the 8.2 config guide here:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/route_static.html

Hopefully this is helpful.

Re: Cisco ASA 5510 two ISP actives

balaji.bandi — Mon, 12 Aug 2019 16:39:45 GMT

yes you can active / Active for both the ISP, but you can mix the load

take example :

instead of send 192.168.1.X to ISP 1 and 192.168.2.X to ISP 2, if ISP 1 fails

192.168.1.X to ISP2 and 192.168.2.X to ISP 2 already - same thing if ISP 2 fails.

i believe this reasonable approach for best usage with IP SLA tracking..