cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
716
Views
0
Helpful
1
Replies

ASA 5512x Multi ISP connections

I have 2 ISP. I would like to have systems from VLAN1 access the internet through ISP1 and systems from VLAN2 access the interner through ISP2. Can a ASA 5512x handle multiple ISP routing? If so I could use help setting this up. I am not looking for a failover solution.

 

Drawing1.jpg

1 Reply 1

Bogdan Nita
VIP Alumni
VIP Alumni

You would need policy based routing to achieve this.

 

route outside 0.0.0.0 0.0.0.0 185.109.198.129
!
access-list PRB-ACL extended permit ip <vlan2-IP> <vlan2-netmask> any
!
route-map PBR permit
 match ip address PRB-ACL
 set ip next-hop <IPS2-IP>
!
interface <int_to_3850>
 policy-route route-map PBR

 

https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/general/asa-94-general-config/route-policy-based.pdf

 

Another thing to consider is that ASA requires by default to receive the traffic on the same interface it was sent. Judging by your diagram I assume you have the ISPs directly connected to the ASA and NATing the internal IPs in the IPS IP , in which case you are ok.

Review Cisco Networking for a $25 gift card