3 ISP router

[moussa.malqui1]

I have 3 ISP router in my ASA 9.2 

can i configure 3 outside ISP with outside1,2 and 3 are the subinterfaces?

Regards,

MM

[Steven Larson]

sure just try this (fill in the "X"s) :

interface GigabitEthernet 0/0.1

 vlan 10

 nameif outside1

 ip address x.x.x.x x.x.x.x

interface GigabitEthernet 0/0.2

vlan 20

 nameif outside2

 ip address x.x.x.x x.x.x.x

interface GigabitEthernet 0/0.3

 vlan 30

 nameif outside3

 ip address x.x.x.x x.x.x.x

interface Gigabitethernet 0/1

 nameif LAN1

 security-level 100

 ip address x.x.x.x x.x.x.x

interface Gigabitethernet 0/2

 nameif LAN2

 security-level 100

 ip address x.x.x.x x.x.x.x

interface Gigabitethernet 0/3

 nameif LAN3

 security-level 100

 ip address x.x.x.x x.x.x.x

ip route 0.0.0.0 0.0.0.0 x.x.x.x x.x.x.x 1

ip route 0.0.0.0 0.0.0.0 x.x.x.x x.x.x.x 2

ip route 0.0.0.0 0.0.0.0 x.x.x.x x.x.x.x 3

nat (LAN1,outside1) source dynamic any interface

nat (LAN2,outside2) source dynamic any interface

nat (LAN3,outside3) source dynamic any interface

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118962-configure-asa-00.html

[moussa.malqui1]

thanks for your helps,

this is no buckup ISP but this is each ISP provider internet to each LAN outside1-LAN1, outside2-LAN2, outside3-LAN3 the ISP router should provider internet simultaniously

regards,

MM

[Steven Larson]

Yes, this can be accomplished with NAT. You can be more specific with your source network to provide route-lookup based on source IP. The nat will determine the egress interface.

For instance:

object network object LAN1

 subnet 192.168.10.0 255.255.255.0

 nat (LAN1,outside1) after-auto source static LAN1 interface

[Marius Gunnerud]

You will need to configure PBR based on traffic zones and ECMP. this is not supported until version 9.4(1) or higher.

--

Please remember to select a correct answer and rate helpful posts