topic Re: Default Routs for ASA Firewall in Network Security

Default Routs for ASA Firewall

Waterbird — Fri, 21 Feb 2020 16:32:09 GMT

Question on Default Routes:

I have an ASA 5506-X connected to an inside LAN network, and the outside interface will be connected to an ISP.

For the default route, should it be the ISP's next hop that I point to? For example:

route outside 0 0 x.x.x.x

Where x.x.x.x is the ISP's router.

Rob Ingram — Mon, 03 Dec 2018 22:27:11 GMT

Hi,
Yes, your example is correct, the next hop for the default route would be the ISP's router IP address.

mkazam001 — Mon, 03 Dec 2018 22:35:07 GMT

yes, route outside 0.0.0.0 0.0.0.0 NXT-HOP-IP

means if packet needs to be routed to a subnet not in the routing table,

it will use the outside interface & send to next hop - ISP IP

regards, mk