2x ASA 5516-X Single Context 3 ISP config

[Will Milner]

Hello All,

I have just configured a HA Active/Standby pair of ASA 5516-X in single context mode with dual ISPs. I also have another ASA5510 with a separate ISP that we use for our public wifi VLAN(2). 

I would like to decommission the ASA 5510 and move the third ISP onto the 5516-X pair. I have already setup sub-interfaces for the VLANs on the HA pair, is it possible to route traffic from VLAN(2) to the third ISP without having to re-configure in multiple context mode ?

Many thanks,

Will 

[Rishabh Seth · Accepted solution]

Hi Will,

As per what you have explained above, I understand that you are currently having dual ISP setup and would like to introduce another ISP connection to 5516-x from 5510.

If you are planning to introduce new ISP only for routing traffic from specific source/ destination, then you can make use of policy based routing(PBR) which is available on 5516-x.

You can refer following link which has details of different use cases of PBR on ASA: click here

Hope it helps.

RS

Rate if you find answer helpful.

[James Leinweber]

If you can upgrade to 9.6 you might also be able to do with the newfangled zones, I think.  Haven't tried it myself.

[Will Milner]

Hey James,

Thanks for your swift reply... Interesting.. Do you have any details on the newfangled zones? I can't find it in the release notes for 9.6 (albeit scan read)

Many thanks,

Will 

[James Leinweber]

Actually, now that I've re-read page 5-36 of the cisco ASA series command reference manual (T-Z ...) the "zone" command was introduced in 9.3(2).  Participating interfaces get a "zone member ..." attribute and do equal-cost multi-path routing across the ensemble.  Worth a further look, anyway.

I'm using a dual-fiber port-channel uplink to my ISP (the U. of Wisconsin-Madison), which has diverse paths to the internet, so it's not something I've needed to try.

[Will Milner]

Hey Rishabh,

Wow thanks! I completely forgot about that... I have come from the ASA 5510 that didn't support PBR. Perfect! 

Many thanks,

Will 

[Rishabh Seth]

great !! :)

RS