topic Separate traffic by protocol - multiple internet interfaces in Network Security

Separate traffic by protocol - multiple internet interfaces

gregbeifuss — Mon, 11 Mar 2019 22:52:27 GMT

Hello,

I would like to connect a second ISP link to our ASA 5510 to solely serve http traffic from our organization's employees (ie. web surfing). We currently have all employee traffic and two site-to-site VPN tunnels connecting to the internet from this firewall. I want to keep the tunnels as currently configured on the existing connection and split out http/https traffic from our staff onto a less costly link.

How would I go about doing this?

Thanks!
Greg

Separate traffic by protocol - multiple internet interfaces

Dennis Mink — Wed, 11 Apr 2012 01:56:47 GMT

Greg,

Normally you could use Policy based routing, but the ASA does not support this (yet), if you have a router in front of the ASA (so between the ISPs and your ASA), you could use PBR to split traffic between providers.

check out this post:

https://supportforums.cisco.com/docs/DOC-6069 it contains a discussion around using NAT to engineer what you are trying to achieve.

please rate if usefull.

Dennis