Cisco Firepower 2100

[Asfandyar70754]

Hey guys,

So one of my customer had a question regarding routing in Cisco Firepower 2100, He asked that he wanted to use one firewall where he wanted to land 2 ISPs and he wants to use both ISPs for separate traffic supposedly  2 subnet will use ISP1 and 2 subnets will use ISP 2.

[Karsten Iwen]

You need Policy based Routing for that. Here is an example:

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/flexconfig_policies.html?bookSearch=true#Cisco_Task_in_List_GUI.dita_bc40fbd4-5a79-48ae-bf3e-34b7f8a1ec9f

[Asfandyar70754]

Hello Karsten,

Thank you for you response. So I would also like to know if I can configure failover for these ISPs or not?

[Karsten Iwen]

For sure, you have to make sure that both ISPs can work independently and then add some route tracking (IP SLA).

[balaji.bandi]

yes possible PBR is the solution to route subnet 1 go to ISP1 and subnet 2 go to ISP 2,  you can also do for high availability failover if one of the ISP fails, (if that is the requirement)

Good video :

https://www.youtube.com/watch?v=MKcSBTJ55e8