02-06-2023 06:03 AM
Hi Experts,
Hope you all are doing well.
please help me in below.
We have two ASA configured in Active/Standby, at present we have single ISP but we are going to have second ISP soon.
new topology would be :
ISP RTR1 -----> ASA1 ------> Core SW1
ISP RTR 2 ----> ASA2 ------> Core SW2
need to know, can i directly connect ISP link with ASA or do i need any Switch in between
If, any switch required what would be switch and ASA configuration OR if switch not required then what would be a ASA(both ASA) configuration.
Thanks,
02-06-2023 06:15 AM
It is very likely that you need an additional switch. Both outside interfaces of both ASAs need to see each other. For Example:
If the ISP device has two ports you can connect both ASAs to it. But it is quite common that the ISP device only has one port. Here you need a switch to connect both ASAs to the ISP router.
02-06-2023 06:20 AM
Thanks Karsten,
any configuration reference for both ASAs.
02-06-2023 06:15 AM
@sajid231088 you should connect the ASA outside interfaces into a switch, in the same vlan as an isp router. That way both ASA can communicate to the isp router.
02-06-2023 06:15 AM
if your ISP gives 2 lines for same connection you can connect that to two ASAs. or use switch between ASAs and ISP router. then connect ISP to switch and 2 cables from switch to 2 ASAs
02-06-2023 06:19 AM
Thanks Kasun for your reply.
I have two different ISPs and IP address provided is also from different network, In such case do i need SW in between or without switch also it will work
02-06-2023 06:29 AM - edited 02-06-2023 06:32 AM
if you have 2 ISPs, each needs to connect to both ASAs using 2 links. for ex,
--------->ISP1 network ----> ASA1
ISP1----> --------->ISP2 network ----> ASA1
Switch
ISP2----> --------->ISP1 network ----> ASA2
--------->ISP2 network ----> ASA2
02-06-2023 02:29 PM
this link can help you in config
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide