cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
465
Views
2
Helpful
4
Replies

ASA with multi hsrp gateway, dual internet feed active active

paul-d
Level 1
Level 1

Hi,

We are looking at an active active internet feed, which is achieved by using multi HSRP groups, on an ASA do you know if its possible to route traffic out to two different gateways if both gateway IP's are in the same subnet?

temp.drawio.png

 

4 Replies 4

@paul-d you can use Equal-Cost Multi-Path (ECMP) routing.

You can have up to 8 equal cost static or dynamic routes per interface. For example, you can configure multiple default routes on the outside interface that specify different gateways.

route outside 0 0 10.1.1.2
route outside 0 0 10.1.1.3
route outside 0 0 10.1.1.4

In this case, traffic is load-balanced on the outside interface between 10.1.1.2, 10.1.1.3, and 10.1.1.4. Traffic is distributed among the specified gateways based on an algorithm that hashes the source and destination IP addresses, incoming interface, protocol, source and destination ports.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa918/configuration/general/asa-918-general-config/route-overview.html#ID-2101-0000004d

 

Ruben Cocheno
Spotlight
Spotlight

@paul-d 

A step by step here, note that ECMP is only supported on the same interface.

https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/115986-asa-eqm-products-configuration-example.html

Tag me to follow up.
Please mark it as Helpful and/or Solution Accepted if that is the case. Thanks for making Engineering easy again.
Connect with me for more on Linkedin https://www.linkedin.com/in/rubencocheno/

friend how you config one interface in ASA and assign two HSRP group in routers ?
you need two interface in ASA and Routers
and config static route using these two interface one for each VIP of HSRP group 
here the ASA will use ECMP (and YOU MUST CAREFULL IN THIS STEP AND READ MORE ABOUT THE ECMP in ASA)
there are so many restriction in ECMP in ASA

MHM 

@MHM Cisco World, FYI, routers do support MHSRP, i.e. two or more HSRP groups on the same interface.

 

Review Cisco Networking for a $25 gift card