ASA 5510 with two outside interfaces which is in separate ISPs

Fatouh3366 — Tue, 12 Mar 2019 00:43:41 GMT

Hi All,

I have ASA5510 with PLUSE License.
I have 2 Inside interfaces as STAFF and MAIL
and two Outside interface OUT_STAFF and OUT_MAIL which is in separate ISP's.
now i want to nat STAFF to OUT_STAFF and MAIL to OUT_MAIL
because I'm having two default routes it gets impossible to do.
I know that it can solve this problem with context,i configured it but it didn't work
Can anyone help me to solve this problem.

ASA 5510 with two outside interfaces which is in separate ISPs

Jouni Forss — Sun, 06 Jan 2013 12:56:21 GMT

Hi,

Its pretty hard to give any specific answer to this with the starting information you gave.

Though I don't see a problem with configuring 2 Security Context and I'm not really sure what the problem was with trying that?

Beginning from the start you would

Boot the ASA in multiple context mode
Configure the 2 Security Contexts and attach 2 interfaces to both of them
- "outside" interfaces would be connected to their own ISPs
- "inside" interfaces would be connected to their own LANs
You would have to confirm that the LAN networks have a default route towards their own Security Context
- If you have a L2 switch network behind the ASA then you simply take the needed Vlans to their own Security Context
- If you have already router acting as the gateway for your local networks before the ASA I guess you would need to consider using Policy Based Routing to forward each LANs traffic to the correct Security Context.

- Jouni

topic ASA 5510 with two outside interfaces which is in separate ISPs in Network Security

ASA 5510 with two outside interfaces which is in separate ISPs

ASA 5510 with two outside interfaces which is in separate ISPs