topic Re: ASA5505 dual ISP both with PPPOE setroute on both interfaces in Network Security

ASA5505 dual ISP both with PPPOE setroute on both interfaces

davidbuit — Mon, 11 Mar 2019 18:39:12 GMT

I would like to setup an ASA5505 with dual ISP connections. Both of the internet connections authentication and obtain their IP address and default route using PPPOE setroute. When I have configure dual ISP support on ASA's in the past I would normally use the sla monitoring and track commands as below but because the default routes in this case are set using PPPOE it isn't possible to manually define the default routes as with the example below.

As this is a 5505 I will use the backup interface command on the primary outside interface. Is this all that is required? Is there a way of configuring an SLA monitor to track using PPPOE setroute on both interfaces?

Normal static IP address example

route outside 0.0.0.0 0.0.0.0 10.200.159.1 1 track 1
route backup 0.0.0.0 0.0.0.0 10.250.250.1 254
sla monitor 123
type echo protocol ipIcmpEcho 10.0.0.1 interface outside
num-packets 3
frequency 10
sla monitor schedule 123 life forever start-time now
track 1 rtr 123 reachability

Any assistance would be much appreciated.

Thanks

Re: ASA5505 dual ISP both with PPPOE setroute on both interfaces

Nagaraja Thanthry — Mon, 13 Sep 2010 00:48:54 GMT

Hello,

If you do not have license restriction (Security Plus License), then you can

use the track option under PPPoE as well.

interface VLAN 2

ip address PPPoE setroute

pppoe client route track "track id"

interface VLAN 3

ip address PPPoE setroute

pppoe client route distance 254

Hope this helps.

Regards,

Re: ASA5505 dual ISP both with PPPOE setroute on both interfaces

davidbuit — Mon, 13 Sep 2010 03:10:31 GMT

Thank you, that is what I was looking for.