09-24-2018 07:45 AM - edited 02-21-2020 08:16 AM
Hi all, with network topology descrived in this topic:
2x isp routers for internet access with dhcp on lan interfaces and 2 different subnets
1x asa 5506-x
2x L2 switches on lan side
i have 2 giga interfaces of the ASA configured with this comand:
ip address dhcp setroute
and nat set to balance diffent vlan traffic to different outside interfaces:
nat (vlan1,outside) source dynamic any interface
nat (vlan2,outside2) source dynamic any interface
is this configuration correct or is it preferable to use static routes? if I do a "show route" I only see default route to outside2 interface:
S* 0.0.0.0 0.0.0.0 [1/0] via 192.168.2.1, outside2
thanks
R.
09-24-2018 01:22 PM
As per your description, is the VLAN2 users working ? they able to get on to internet,
If yes, then add another static router same like outside2 replace with vlan 1 IP and outside
or post the full configuration to review and suggest.
09-25-2018 12:25 AM
09-26-2018 01:01 AM
Policy based routing can be the solution?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide