Dual WAN with custom routing

[mobizent01]

I have a 5506-X

I have a site to site with another location over WAN 1 & we also use this WAN for internet traffic.

I now have an additional WAN connection.

I want traffic from, Local Clients (192.168.2.x), to the remote site to (192.168.1.x) go over WAN 1

I want all Internet traffic go over WAN 2

So my question is:

1. Does 5506-X support dual WAN>

2. How do i set this up?

thanks

[Aditya Ganjoo]

Hi,

Yes ASA supports this setup with the use of Policy Based routing (PBR):

Its supported now in 9.4 

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/configuration/general/asa-general-cli/route-policy-based.html

Regards,

Aditya

Please rate helpful posts.

[Akshay Rastogi]

Hi,

Try to use Manual NAT for your site to site vpn and Object nat for your rest of the traffic. Something like:

object network obj-any

 subnet 0 0

 nat (inside,wan2) dynamic interface

 route wan2 0 0 <wan2 next-hop>

 route wan1 0 0 <wan1 next-hop> 255

Object net obj-local-site

 subnet 10.1.1.0 255.255.255.0

Object net obj-remote-site

 subnet 20.1.1.0 255.255.255.0

nat (inside,wan1) source static obj-local-site obj-local-site destination static obj-remote-site obj-remote-site no-proxy-arp

I think this should work.

Regards,

Akshay Rastogi

Remember to rate helpful posts.