2 ISP Link

anthony.dyne — Mon, 11 Mar 2019 22:31:59 GMT

Can we terminate 2 Internet link on ASA and get loadbalancing + failover setup

Loadbalancing - send http,https traffic on Link A and other traffic on Link B

Failover - If Link A fails then all traffic reroutes to Link B and vice-versa

Thanks

Anthony

Julio Carvajal — Sun, 19 Feb 2012 22:07:53 GMT

Hello Anthony,

As you migth know PBR is not supported on ASAs but there are some work-arounds to do it ( CISCO does not support it officialy) that could work.

The failover will be done by using SLA monitoring:

For the PBR ( Send http and https on one link)

route ISP1 0 0 1.1.1.2 // Default route pointing to ISP1

route ISP2 0 0 2.2.2.2 2 // Default route with Metric 2 via ISP2

static (ISP2,inside) tcp 0.0.0.0 80 0.0.0.0 80

static (ISP2,inside) tcp 0.0.0.0 443 0.0.0.0 443

sysopt noproxyarp inside // important, otherwise it will cause routing issues as the ASA will start sending proxy-arps for all hosts on the inside.

nat (inside) 1 0 0

global (ISP1) 1 interface

global (ISP2) 1 interface

Do rate helpful posts

Julio

topic 2 ISP Link in Network Security