topic ASA 5510 7.2 two isp problem (not backup or load balancing) in Network Security

ASA 5510 7.2 two isp problem (not backup or load balancing)

tiago.nunes — Mon, 11 Mar 2019 13:45:47 GMT

Hi there

I'm having a problem with an ASA. I have the scenario that is shown in the word document attached. The problem is that, when i create the static route in the ASA, the traffic to the vpn is not forwared to the correct interface. Instead, is forwarded to the default route. the tunnel is well established, but the traffic is not going trough the correct interface. When i point the default route to the adsl 1 interface, everything works fine...but not as the costumer wants

I send the configuration of the ASA. In the configuration is not shown the correct routes, because i had to remove them to leave everything working trough ADSL1.

But they would be something like this

route outside 10.2.20.0/24 10.0.10.254

route outside 2 0.0.0.0/0 10.0.11.254

Thanks in advance

Best regards

Re: ASA 5510 7.2 two isp problem (not backup or load balancing)

thefindjack — Wed, 17 Sep 2008 18:55:36 GMT

Try this....

route outside 0.0.0.0 0.0.0.0 10.0.10.254 1 tunneled

route outside2 0.0.0.0 0.0.0.0 10.0.11.254 1

Here is a document that explains this.

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6635/ps6659/prod_white_paper0900aecd805f0bd6.html

Please rate if this helps!

Thanks

Re: ASA 5510 7.2 two isp problem (not backup or load balancing)

tiago.nunes — Wed, 17 Sep 2008 19:10:47 GMT

Just like that? In the document the refer policy routing. I won't need to do that?

Re: ASA 5510 7.2 two isp problem (not backup or load balancing)

thefindjack — Wed, 17 Sep 2008 19:19:20 GMT

Not for ASA/PIX, this is a built in feature that allows all traffic that came into the device encrypted to leave out of the "tunneled" default route and all traffic that comes in unencrypted leave via the normal default route.

Re: ASA 5510 7.2 two isp problem (not backup or load balancing)

tiago.nunes — Wed, 17 Sep 2008 19:24:19 GMT

Thank you very much for your help! I'll try that tomorrow. I'll post again and rate your help as soon as i try it