cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
695
Views
0
Helpful
1
Replies

ASA5510 and Multiple Outside Interfaces Problem

goochland
Level 1
Level 1

We have an ASA 5510 firewall.  There are 4 ports on it configured as 2 outside, one inside, and one DMZ.  We have two cable modems attached to the outside ports.  Our plan is to have the "inside" port directed to one outside port/cable modem, and the DMZ port directed to the other outside port/cable modem.

We have been able to get the "inside-to-outside" setup to work but not the "DMZ-to-outside" setup (at least at the same time).

First off, is this possible?  If so, what are we likely missing - some way to have a second default route for the DMZ?

(My manager is the "Cisco person" here, not me, so I may not have enough info.  All help is appreciated.)

1 Reply 1

varrao
Level 10
Level 10

Hi Jim,

I did encounter such a situation, here second default route would not work, what might work here is static d-nat. My suggestion to you would be :

static (outside2,dmz) 0.0.0.0 0.0.0.0

route outside2 0.0.0.0 0.0.0.0 2

Now i am assuming here that you have two interfaces, outside1 and outside2. Let me know if it works.

Thanks,

Varun

Thanks,
Varun Rao
Review Cisco Networking for a $25 gift card