topic how to create default route on multiple internet interfaces? in Network Security

how to create default route on multiple internet interfaces?

Omar Abdelhalim — Tue, 12 Mar 2019 01:00:37 GMT

Hi All,

I have Case: .... please see the diagram in the image below

1- ASA Firewall version 8.2.

2- Access Switches, and no core switch(s).

3- 2 ISPs with different Real IPs Ranges.

what i want to do:

1- Make the ASA Firewall as a Core Switch "create vlans and route betwwen vlans".

2- NAT Groups of Vlans to an ISP and others to the Other ISP.

3- Make Default to the first ISP, and also Default route to the other ISP.

4- Track the first default route, if down go to the other route.....

How can i do this?

Thanks

Omar

how to create default route on multiple internet interfaces?

abcdrohan — Thu, 14 Feb 2013 21:12:21 GMT

Is this what you are looking for?

http://www.gomjabbar.com/2011/12/16/cisco-asa-sla-monitoring/

how to create default route on multiple internet interfaces?

jocamare — Tue, 19 Feb 2013 04:33:18 GMT

What you are talking about is known as Policy-based routing or PBR and it's not supported by the ASA.

how to create default route on multiple internet interfaces?

nkarthikeyan — Tue, 19 Feb 2013 06:20:10 GMT

Hi Omar,

You can create two default route with different metric value say you have two internet gateways 1.1.1.1 (isp1) and 2.2.2.2 (isp2).

You can have a default route like the below in you ASA

route outisde 0.0.0.0 0.0.0.0 1.1.1.1

route outside 0.0.0.0 0.0.0.0 2.2.2.2 2

If 1.1.1.1(ISP1) fails and not reachable it will take the secondary def route to reach the internet.

Hope this helps.

Karthik

Please do rate if the given information helps.

how to create default route on multiple internet interfaces?

Andrew Phirsov — Tue, 19 Feb 2013 06:29:43 GMT

What he's talking about is just regular sla-monitoring (tracking static route) wich asa supports, not PBR as on ISR (with route-maps and etc.). So it easily can be done.

how to create default route on multiple internet interfaces?

jocamare — Tue, 19 Feb 2013 08:03:11 GMT

It might be just me, but it sounds like PBR and SLA, still not supported.