topic Re: Cisco ASA Load sharing between two ISP's in Network Security

Cisco ASA Load sharing between two ISP's

alundin31 — Mon, 11 Mar 2019 13:06:18 GMT

Hi everyone,

The problem I'm having is that I have four configured interfaces. Two of them going to two different ISP's with two different networks configured. We can call them 10.10.1.0/24 and 10.10.2.0/24. The other two can be 192.168.1.0/24 and 192.168.2.0/24.

The default route is 10.10.1.1 going to ISP #1 and 192.168.1.0/24 is PAT'ed to 10.10.1.20

The problem is that I want to PAT 192.168.2.0/24 to 10.10.2.10 and send that traffic to 10.10.2.1, going to ISP #2.

How would I set this up?

Regards

Andreas

Re: Cisco ASA Load sharing between two ISP's

a.alekseev — Fri, 27 Jun 2008 17:01:27 GMT

This is impossible with ASA, but possible with a router.

Only one possible way is to split your ASA in two context.

and associate 10.10.1.0/24 192.168.1.0/24 with first context and 10.10.2.0/24 192.168.2.0/24 with the second.

But is this case you will lose all vpn functionality.

Re: Cisco ASA Load sharing between two ISP's

alundin31 — Mon, 30 Jun 2008 09:02:58 GMT

Thanks for you answer, appreciate it.

Re: Cisco ASA Load sharing between two ISP's

meetnnnn_cisco — Wed, 02 Jul 2008 14:36:58 GMT

Hi, We are freshers going through the article. We couldnt understand clearly your problem and the solution provided. Can u please explain the same.

Re: Cisco ASA Load sharing between two ISP's

a.alekseev — Wed, 02 Jul 2008 16:44:01 GMT

PIX/ASA cannot do load balancing as a router do.

PIX/ASA cannot do policy based routing as a router do.

The default route is 10.10.1.1 going to ISP #1 and 192.168.1.0/24 is PAT'ed to 10.10.1.20

The problem is that Andreas wants to PAT 192.168.2.0/24 to 10.10.2.10 and send that traffic to 10.10.2.1, going to ISP #2.

How can we do this?

using two separated ASA (physicaly or logicaly)

the first - for ISP #1 and 192.168.1.0/24

the second - for ISP #2 and 192.168.2.0/24

If we use logical separation we use contexts on ASA.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml