topic Two ISP's for dmz & inside in Network Security

Two ISP's for dmz & inside

alialjamri2008 — Mon, 11 Mar 2019 23:51:43 GMT

I have two internet ISP's links, currently dmz and inside interfaces are using one ISP (route outside 0.0.0.0 0.0.0.0 “ISP1_IP”), I need to use one ISP for inside and the other ISP for dmz.

appreciate your help.

Ali

Two ISP's for dmz & inside

terrencepayet — Sun, 09 Sep 2012 12:48:17 GMT

Hi Ali,

Please elaborate more on what you want to achieve so that we can help you.

Also give us model and ios version of ASA.

Regards,

Terence

Two ISP's for dmz & inside

alialjamri2008 — Sun, 09 Sep 2012 13:15:29 GMT

ASA5510 Software Version 8.2(2)

We have one ISP (ISP1) outside connection (Business), and we need to add one for Gust access. The gust will be routed to another ISP (ISP2) through dmz. Please see attached illustration diagram.

Thanks

Ali

Re: Two ISP's for dmz & inside

ridesh.cisco — Mon, 10 Sep 2012 22:55:57 GMT

Hi,

I am assuming ISP1 for Internal zone and ISP2 for DMZ.

Internal zone is allowed to access all protocols

access-list inside_access_in extended permit ip Internal-IP 255.255.255.0 any

Allow access from internet to DMZ server

access-list outside1_access_in extended permit tcp any host DMZ-Server'sPulic IP

Pat on the outside and DMZ interface for internal hosts

global (outside) 1 interface

global (dmz) 1 interface

nat (inside) 1 internal-IP netmask

Static NAT mapping for our DMZ server

static (dmz,outside1) DMZ-Server'sGlobal-IP DMZ-Server's-PrivateIP netmask 255.255.255.255

access-group outside1_access_in in interface outside1

access-group inside_access_in in interface inside

Default Routes

route outside 0.0.0.0 0.0.0.0 ISP1-Gateway 1

route outside1 0.0.0.0 0.0.0.0 ISP2-Gateway 2

hera, outside = ASA port that is connected to ISP1

outside1=ASA port that is connected to ISP2