topic implement a secondary ISP to ASA 5510 in Network Security

implement a secondary ISP to ASA 5510

mburguk1000 — Mon, 11 Mar 2019 23:47:01 GMT

We are in the process of implementing secondary ISP to our ASA firewall and I wondered if anyone else has configured something like this ??

We would like to run both ISPs in parallel so we can test until we finally cutover

Any help would be greatly appreciated

Thanks

Mark

implement a secondary ISP to ASA 5510

Karsten Iwen — Tue, 28 Aug 2012 13:15:52 GMT

The ASA only supports the concept of primary and backup ISP. You cant use both at the same time if you need a default-route for both of them. And if you want to test the new functionality on the new link you probably need that.

--
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

implement a secondary ISP to ASA 5510

Julio Carvajal — Tue, 28 Aug 2012 18:41:58 GMT

Hello,

You could implement the SLA monitoring, so you can have a redundant path in case you lost connectivity to the outside world via the primary ISP.

This will not allow Load-balancing.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

As you might now there is no possibility to do PBR on the ASA, but just as a workaround you could send all HTTP and HTTPS traffic over a link based on nat rules... Or send all the VPN traffic over a link and then the rest of the traffic over the other one

Those are the two options you have

Remember to rate all the helpful posts

Julio