topic First: Do you have the in Network Security

Asa routing question

ddhond123 — Fri, 21 Feb 2020 13:43:33 GMT

We currently have a ASA 5505 with 2 isp. One primary and another backup. We would like to use one isp for certain traffic web, etc and second isp for VOIP. Based on other threads, I understand that policy based routing is not possible through 5505. Is it recommended to upgrade the 5505 to a newer model to use 9.4 or keep current asa and add a router for routing.

Thanks

First: Do you have the

Chad W — Thu, 04 Feb 2016 19:55:28 GMT

First: Do you have the security plus license? You will need that.

You can setup traffic to go out a certain interface. I have done this to share the load with and direct traffic, but the ASA is not a router.

You are using the SLA for the main failover I imagine, the one thing to remember is to let the interesting traffic know that it can use the other link if their's is down. Be careful to not set your SLA checks to a short period of time, nothing like having a connection flip every time a packet fails 🙂 Depending on the critically, I always use 30 seconds (I think it's time based)

Here is a link with better details 🙂

https://supportforums.cisco.com/discussion/10871951/asa-5505-security-plus-dual-isp

Hello,

Ganesh Hariharan — Thu, 11 Feb 2016 17:32:24 GMT

Hello,

ASA doesn't support load balancing but only primary/backup failover with static routing and tracking feature.

Have a look on the below link for more details

http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/70559-pix-dual-isp.html

-GI