topic Re: asa5520 connect second t-1 in Network Security

asa5520 connect second t-1

kmcilvaine — Mon, 11 Mar 2019 11:48:17 GMT

I have an asa 5520 currently running with a t-1. I would like to add a physically seperate t-1 to load balance ..is this posible? 2 seperate isp routers.

Re: asa5520 connect second t-1

Richard Burts — Tue, 15 Jan 2008 20:57:46 GMT

Keith

How is the 5520 currently talking to the T1? Since the 5520 has no serial interfaces I assume that it must be connecting through some device that has a T1 interface and an Ethernet/Fast Ethernet interface. What are the options for connecting another T1 to that device?

HTH

Rick

Re: asa5520 connect second t-1

kmcilvaine — Tue, 15 Jan 2008 21:15:32 GMT

The t-1's are on seperate routers. The current 1 is connected via ethernet to the firewall. The second 1 is not connected yet but is also ethernet. I was wondering if i could connect a hub in between the t-1's and then create a second default route on the firewall.

Re: asa5520 connect second t-1

Richard Burts — Tue, 15 Jan 2008 21:37:48 GMT

Keith

I believe that the difficult part of this will be the second default route. You could certainly connect the 2 routers and the firewall using a hub or I would prefer to do this with a small switch.

Adding a second default route implies load sharing when both routes are available and failover if one default route fails. Unfortunately the 5520 does not do this.

If your objective were redundancy and failover you could connect the 2 routers and the firewall via hub or switch and configure HSRP between the routers Ethernet interfaces with the firewall default route using the shared IP as the next hop address in the default route. If the routers track their serial interfaces in the HSRP you would have effective redundancy and failover.

HTH

Rick

Re: asa5520 connect second t-1

kmcilvaine — Tue, 15 Jan 2008 21:43:14 GMT

I was looking to do load sharing with the new t-1. It sounds like the 5520 does not do this and why? Is there any work around to this?

Re: asa5520 connect second t-1

kmcilvaine — Fri, 18 Jan 2008 22:03:10 GMT

I have a spare asa5520 could i set that up as active/active and load balance the seperate t-1's

Re: asa5520 connect second t-1

Richard Burts — Fri, 18 Jan 2008 23:13:55 GMT

Keith

I do not have experience with this type implementation. But I would assume that you could use the active/active to send traffic over both T1s.

HTH

Rick