topic Re: Cisco ASA5510 Suggestion required in Network Security

Cisco ASA5510 & Policy Based Routing

arjun-hegde — Mon, 11 Mar 2019 17:49:51 GMT

Hi there,

We are proposing Cisco ASA 5510 to one of our customers. They intend to have two internet links - one ADSL Link and One Leasedline. The need us to configure the ASA to forward all internet traffic via ADSL links and use leased line for email and SAP traffic.

Can this configuration be done in Cisco ASA without any problems. Please advice me on any working configuration and reference files.

Thanks,

Arjun

Re: Cisco ASA5510 Suggestion required

Federico Coto Fajardo — Mon, 24 May 2010 13:53:16 GMT

Hi,

The ASA can handle this with no problems.

Just keep in mind that all interfaces on the ASA are ethernet interfaces and you cannot connect a DSL or serial link directly (you can with a converter).

Also, the ASA can have two ISPs with redundancy (not with load balancing).

Here's the data sheet for your reference:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html

Hope to help.

Federico.

Re: Cisco ASA5510 Suggestion required

arjun-hegde — Mon, 24 May 2010 14:06:10 GMT

Hi Federico,

I am still not confident. My priority is to split the http traffic to adsl internet link(ISP link1) and forward only email and SAP application traffic to leased line (ISP Link 2).

Please help me confirm or let me know if you have any working configuration.

Regards,

Arjun

Re: Cisco ASA5510 Suggestion required

Jon Marshall — Mon, 24 May 2010 15:14:55 GMT

arjun-hegde wrote:
Hi Federico,
I am still not confident. My priority is to split the http traffic to adsl internet link(ISP link1) and  forward only email and SAP application traffic to leased line (ISP Link 2).
Please help me confirm or let me know if you have any working configuration.
Regards,
Arjun

Arjun

The ASA does not support PBR so you cannot do this. If you have a pair of firewalls you could run an active/active pair of contexts so that each context could have it's own default-route back out to the relevant ISP.

Jon

Re: Cisco ASA5510 Suggestion required

Ben M Johnson — Mon, 22 Nov 2010 02:59:45 GMT

So what would be a recommended solution to this situation?

That is also cost effective.

Re: Cisco ASA5510 Suggestion required

Kureli Sankar — Mon, 22 Nov 2010 03:34:45 GMT

Arjun,

This question has been asked many times on this community so, I wrote a document a few weeks ago to answer some questions and suggest other options. Pls. read here: https://supportforums.cisco.com/docs/DOC-13015

-KS

Re: Cisco ASA5510 Suggestion required

Ben M Johnson — Mon, 22 Nov 2010 04:40:10 GMT

Just found that document. It wasn't here when I was trolling back a few months ago.

Thanks!