topic Cisco ASA 5510 with 2 internet connections in Network Security

Cisco ASA 5510 with 2 internet connections

andy_4578 — Tue, 12 Mar 2019 01:24:31 GMT

Is it possible to have a Cisco ASA5510 with two internet connections performing as follows..

Internet A---------All traffic except LAN to LAN vpn

Internet B---------LAN to LAN vpn

I cant find anything definitive on google to say it will or wont, i know it cant do policy based routing.

Thanks

Re: Cisco ASA 5510 with 2 internet connections

Andrew Phirsov — Sat, 06 Apr 2013 14:43:00 GMT

Surely it's possible.

To perform this you should configure:

- default route (0.0.0.0) through the one interface, pointing to the Internet A ISP IP. With this, all you internal traffic to the Internet will go through that interface;

- specific route through the other iterface, towards the remote LAN, pointing to the Internet B ISP IP. All the vpn traffic will follow this route and this interface.

route outside 0.0.0.0 0.0.0.0 ISP_1_IP

route outside_VPN 192.168.10.0 255.255.255.0 ISP_2_IP

Re: Cisco ASA 5510 with 2 internet connections

cmihaylov_2 — Sat, 06 Apr 2013 15:04:07 GMT

Also you should configure your crypto to terminate on the interface, connected to the "Internet B" provider.

Otherwise you will have some kind of asymmetrical routing and your lan-to-lan VPN will not work.

Cisco ASA 5510 with 2 internet connections

andy_4578 — Sat, 06 Apr 2013 16:32:32 GMT

I've done it a different way and used Proxy ARP so both subnets are useable on a single interface and its working well, thanks for your help though 🙂