Cisco ASA 5520 Two Outside Connections

[Cash2106]

Hi there,

i have a cisco asa 5520 in my office, my concern is, can i configure two ports at the same time as outside, incase if one goes down i can plug second and use it. please let me know.

because sometimes when my one internet connection goes down, then i always have to edit the outside IP scheme for other ISP and also have to change the default route to keep all the users have internet services.

if i can configure two ports as outside and if its possible please let me know.

[Rob Ingram]

@Cash2106 

You can achieve this using IP SLA and track the primary ISP, if this goes down it will use automatically use the backup ISP connection. Here is a step by step guide.

HTH

[Cash2106]

@Rob Ingramthanks for your concern, can you please tell me how i can do that in ASDM, because i am not good in command line thing .. if possible please can you guide me how can i do that in ASDM...  and my ASA version is 8.4(3), ASDM Version 6.4(7),

does my ASDM will support that feature or not please do let me know

[Rob Ingram]

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118962-configure-asa-00.html

https://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/70559-pix-dual-isp.html

[Cash2106]

@Rob Ingrami have created both rules, do i have to change anything in the access rule part and the nat rules part, or these will be the same as before.

i mean suppose if one outside goes down, then how access rule and nat rule will work because these both are configured for outside interface and when outside interface goes down then how these both rules will perform ? please guide me.

and also i have configured site-to-site vpn configured on outside interface. once outside will goes down then how my vpn will act.

[Cash2106]

@Rob Ingrami have configured the settings, but on my other ISP which i have configured for backup, one IP is bind with my email server, and before plugging the backup ISP cable to cisco asa, my clients was able to access my email server through web access, but as soon as i have plugged in the cable of Backup ISP in the cisco asa, ping for that ip is autmotically goes off even the IP is not configured on the backup port, and users are not able to access the emails through web and outlook also stopped working, when i unplug the backup ISP cable from Cisco ASA backup port then it start working.

can you please tell me what is stopping in cisco asa which never allow users to use email and outlook and ping as well. please help me.