topic Re: ASA5520 with Two ISP's in Network Security

ASA5520 with Two ISP's

cowetacoit — Mon, 11 Mar 2019 12:36:42 GMT

I have an ASA5520. It's been running fine with my one ISP, about 3 one to one NAT's and PAT to one outside IP. My question is, i recently added a second ISP that is going to used for one subnet on my LAN. What i did is treated that one subnet just as all of my other subnets, pointed a static route from core switch to the ASA. I also added a static route for it back to the core switch. I created a PAT for that subnet to the new ISP IP address. Added the new IP to a new outside interface. When i try to get out to the internet on a PC, i can't. When i debug the ASA it gives a PORTMAP TRANSLATION CREATION FAILED FOR (protocol, src ip and dest ip). Any suggestions? Is this a bug or am i just missing something?

Re: ASA5520 with Two ISP's

ajuma — Tue, 29 Apr 2008 21:59:32 GMT

I imagine it's due to having your default route on one interface, but you're translating out the other interface. Not 100% positive though.

Re: ASA5520 with Two ISP's

farkascsgy — Wed, 30 Apr 2008 14:08:18 GMT

Hello,

As I know ASA supports only one ISP at the same time, you can have a backup Internet line and in case of the failure of the first one it falls back to the backup. You should configure route tracking.

Please rate me if I helped.

bye

FCS

Re: ASA5520 with Two ISP's

kapish.mohole — Thu, 01 May 2008 04:14:29 GMT

Are you trying to load balance on both ISPs, and are they directly connected on your ASA?

Please put here the configuration.

Regards

Re: ASA5520 with Two ISP's

farkascsgy — Thu, 01 May 2008 11:51:33 GMT

Please see the below article about dual ISP, this is the way how ASA can handle Dual ISP..

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

bye

FCS

Please rate me if I helped

Re: ASA5520 with Two ISP's

cowetacoit — Thu, 01 May 2008 12:25:51 GMT

Not trying to load balance. I have one subnet on my network that needs to go to ISO2 because they are PC's that the public access and ISP2 is a content filtered connection from the state. I need the PC's on my network to manage, but at the same time, go out ISP2. All other traffic go out ISP1.