Cisco ASA5510 & Policy Based Routing

[arjun-hegde]

Hi there,

We are proposing Cisco ASA 5510 to one of our customers. They intend to have two internet links - one ADSL Link and One Leasedline. The need us to configure the ASA to forward all internet traffic via ADSL links and use leased line for email and SAP traffic.

Can this configuration be done in Cisco ASA without any problems. Please advice me on any working configuration and reference files.

Thanks,

Arjun

[Federico Coto Fajardo]

Hi,

The ASA can handle this with no problems.

Just keep in mind that all interfaces on the ASA are ethernet interfaces and you cannot connect a DSL or serial link directly (you can with a converter).

Also, the ASA can have two ISPs with redundancy (not with load balancing).

Here's the data sheet for your reference:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html

Hope to help.

Federico.

[arjun-hegde]

Hi Federico,

I am still not confident. My priority is to split the http traffic to adsl internet link(ISP link1) and  forward only email and SAP application traffic to leased line (ISP Link 2).

Please help me confirm or let me know if you have any working configuration.

Regards,

Arjun

[Jon Marshall]

arjun-hegde wrote:
Hi Federico,
I am still not confident. My priority is to split the http traffic to adsl internet link(ISP link1) and  forward only email and SAP application traffic to leased line (ISP Link 2).
Please help me confirm or let me know if you have any working configuration.
Regards,
Arjun

Arjun

The ASA does not support PBR so you cannot do this. If you have a pair of firewalls you could run an active/active pair of contexts so that each context could have it's own default-route back out to the relevant ISP.

Jon

[Ben M Johnson]

So what would be a recommended solution to this situation?

That is also cost effective.

[Kureli Sankar]

Arjun,

This question has been asked many times on this community so, I wrote a document a few weeks ago to answer some questions and suggest other options. Pls. read here: https://supportforums.cisco.com/docs/DOC-13015

-KS

[Ben M Johnson]

Just found that document.  It wasn't here when I was trolling back a few months ago.

Thanks!