topic ASA 5520 with two ISP?s. Question I want to use both for services insideDMZ in Network Security

ASA 5520 with two ISP?s. Question I want to use both for services insideDMZ

ronaldo.melo — Mon, 11 Mar 2019 10:21:56 GMT

Hi folks, I want to use two ISP?s (Internet_1 and Inernet_2)both I had valid IP?s. I configured the NAT as following:

Real IP : 192.168.2.92

NAT (Internet_1): 200.252.153.137/32

Real IP : 192.168.2.80

NAT (Internet_2): 200.181.58.163/32

All my network uses the interface IP of Internet_1 for access Internet (NAT_access_Internet)and my Default gateway is from Internet_1. The problem is with NAT on Internet_2. The NAT to my DMZ works but when the packet reply to the host in Global Internet it uses the Internet_1 and my connection drop. (see file)

Thanks.

Ronaldo.

Re: ASA 5520 with two ISP?s. Question I want to use both for ser

cpembleton — Tue, 29 May 2007 19:15:58 GMT

Not possible for dynamic connections. If you only had certain IP's it was communicating with you could do it with static routes. Otherwise your default route will be used.

What does your outside Interfaces connect to? If you had a router there you could use policy based routing to NAT/PAT and set the default route to either interface based on what IP it came from.

or you could just use one as a backup link.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

Thanks,

Chad

Re: ASA 5520 with two ISP?s. Question I want to use both for ser

ronaldo.melo — Wed, 30 May 2007 12:36:41 GMT

Hi Chad,

You are right. I will try do the first option at the Router of Internet.

Thanks,

Ronaldo.