ASA phone proxy issue while ASA is not default gateway

[yuhuiyao]

All,

Is there a way to configure ASA for phone proxy while ASA is not default gateway to the internet, it is a parallel firewall connected to the internet.

Thanks.

[Anu M Chacko]

Hi,

Is this parallel firewall a Cisco firewall? Also, what is the deafult gateway for the call manager? Is it the ASA or the parallel firewall?

Let me know.

Regards,

Anu

[yuhuiyao]

Hi,

Both firewalls are ASAs. Currently all the traffic to the internet is going through ASA-01. We want to add another parallel ASA, ASA-02 to handle phone proxy, while keeping ASA-01 handling the internet traffic. Is there a way to do that?

Thanks.

[Anu M Chacko]

Hi,

Yes you can do that. You will have to careful of asymmetric routing, so that all phone traffic enters and exits through the same firewall. So, on the phone proxy ASA, enable:

nat (outside) 2 0 0 outside

global (inside) 2 interface

Regards,

Anu

P.S. Please mark this question as resolved if it has been answered. Do rate helpful posts!

[yuhuiyao]

How can I redirect all the outgoing voice traffic to the the 2nd ASA, ASA-02?

[Anu M Chacko]

Hi,

Do you mean all traffic from the Call manager? If yes, then you need to set the default gateway for the it to be ASA-02's IP address.

Hope this helps!

Regards,

Anu