DUAL ISP on ASA5505

[Unimoreno]

I need to configure my asa as follows: Two active ISP´s, one(ISP1) for outbound traffic (normal internet traffic) and the other one for inbound traffic(ISP2), http to a web server in the inside network. I have two default routes, one pointing to ISP 1 with metric 1 and the other to ISP2 with metric 2. I perform dynamic nat to ISP1 interface with hosts in the inside network and static nat to ISP2 interface with web server.

Everything works fine with ISP1 but I cannot access my web server from outside..any suggestions?

Thanks in advance,

Laura

[varrao]

Hi Laura,

Unfortunately ASA does not support load balancing and you would not be able to have 2 default routes on the ASA, only the one with a lower metric would take precedence everytime. Although there is a document for it on the forum, but it is just a workaround but not a supported configuration. If it is very necessary for you, use it only then:

https://supportforums.cisco.com/docs/DOC-15622

Hope that helps.

Thanks,
Varun Rao
Security Team,
Cisco TAC