Hi guys,
Could anyone please help me out with the configuration to meet the following requirement?
I have one MPLS link which is terminating on the MPLS router and from there I am connecting my ASA Firewall. My inside Network is 192.168.12.0/24. I have also another internet leased line for VPN connectivity (Client Site) for the same internal users who are on 192.168.12.0/24 and it will be worked as back-up in case of MPLS link fails. So, my ASA outside interface is connected to this public network which is originally terminated on another router. I have also a DMZ zone where specific servers are located and which are in 172.16.0.0/16 network. That means, all of the four interfaces in my ASA firewall are configured in the following manner.
interface inside ---------- Connecting to LAN switch where users will be terminating
ip address 192.168.12.0/24
interface outside ---------- Connecting to Public Network facing internet router
ip address 121.164.130/24
interface dmz ---------- Connecting to Server farm
ip address 172.16.0.0/16
interface mpls ---------- Connecting to MPLS router interface
ip address 10.10.10.1 /24
My question is, how can i configure the routing on ASA, MPLS router and internet router without enabling the NATTing on ASA? By default users must pass through MPLS cloud and the traffic has to be passed on through VPN if the MPLS link fails.
Your help in this regard is highly appriciated. Thanks
