ASA 5510 two internet connections

[Rob Pettigrew]

We are in the process of getting two new connections pulled in that I would like to utilize in the following configuration.

DS3 - 45/45

I would like to use this circuit for all of our servers to NAT out of as well as our VPN tunnel to our remote site.  It will be much more reliable than our cable line.

Cable Internet - 50/10

I would like to use this for all internet traffic that users generate.  I would like to be able to fail over to the DS3 if this line goes down.

To get all traffic go out the cable line would take a dynamic NAT rule and a default route.  How would I automate a failover to the DS3 with a backup route and dynamic NAT rule?

I understand that if the DS3 goes down it will take manual intervention to bring the tunnel back up and servers with static NAT will need reconfiguration.

Thanks in advance for your help

Rob

[varrao · Accepted solution]

Hi Rob,

You can configure, dual ISP on ASA, have a look at this doc:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

Hope this helps,

Thanks,

Varun