Cisco ASA 5506-x ISP redundancy

[rizwan.nadeem]

Hello Dear,

I need some help. i need to configure WAN fail over, i have one WAN connection with redundant pipe and i have one static IP, so i want to know how can we configure single static IP in two interfaces and make it fail over, if one pipe will down then second pipe will turn on automatically but the public IP is one.

[Philip D'Ath]

Unless you are paying for a premium business fibre service, you wont be able to use the static IP address from one circuit on another circuit.

[rizwan.nadeem]

Yes, i am paying premium business fiber services but when i enter same public ip to anther interface then it wont allow me to use same ip on another interface. For reference i have attached the image. 

please guide me further. 

[Philip D'Ath]

Has the provider confirmed that they will route the same static IP address down both of your fibre circuits?

If so, which method has the ISP said they want you to use?  The ISP will need someone way to know which circuit to route that public IP down.

[rizwan.nadeem]

Yes, they confirmed both fibre circuits have the same static routes. 

they asked me to terminate the both circuits on your firewall and then configure it from your ASA, currently one circuit is terminated and working fine but when i configure the second interface with same public ip so it will not allow me to configure.

Can we configure same IP on both interfaces for ISP fail over?

[Philip D'Ath]

So they can given you a /30 for each circuit, and then the static IP is routed via that?

Or are perhaps these two circuits part of a common layer 2 bridge domain?

[Philip D'Ath]

If it is a common bridge domain, then you would use a config something like the below.  I think you need 9.7 software to use this feature.

interface BVI1
 nameif outside
 security-level 0
 ip address x.x.x.x y.y.y.y
interface GigabitEthernet1/1
 bridge-group 1
interface GigabitEthernet1/2
 bridge-group 1

[rizwan.nadeem]

Alright, thank you for helping me, let me ask from ISP then i will get back to you. 

[rizwan.nadeem]

yes they provided us a /30 pool.

This is i m not sure, i need to ask from them.

shall i ask from them? 

[Philip D'Ath]

Ask them how each circuit should be configured.