Dual ISP's ASA

[Will Phinney]

Good evening everyone,

I'm looking into doing a design using a pair of ASA's on my edge with two differernt ISP's for failover, active/standby. The ASA's would be my edge devices with no other routers nor will I be running BGP. I've setup ASA's using single ISP's and have even used redundant ISP's using BGP to the edge, but never done a pair of ASA's with redundant links. Has anyone done this? Thanks in advance!

[Ferdinand Guasque]

Hi Will,

you may want to look into this link for more information on the config for setting up ASA as a failover

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/ha_failover.html

Hope this helps!

[Marvin Rhoads]

Will, please refer to this configuration technote.

In a nutshell, the current capability of the ASA limits you to tracking the reachability of one ISP and failing over to the second in the event of connectivity failure.

ASAs cannot (currently) do policy based routing. It may be a feature in future releases; but for now you're limited to the method described in the above link.