Hi All,
I have Case: .... please see the diagram in the image below
1- ASA Firewall version 8.2.
2- Access Switches, and no core switch(s).
3- 2 ISPs with different Real IPs Ranges.
what i want to do:
1- Make the ASA Firewall as a Core Switch "create vlans and route betwwen vlans".
2- NAT Groups of Vlans to an ISP and others to the Other ISP.
3- Make Default to the first ISP, and also Default route to the other ISP.
4- Track the first default route, if down go to the other route.....
How can i do this?
Thanks
Omar
Is this what you are looking for?
http://www.gomjabbar.com/2011/12/16/cisco-asa-sla-monitoring/
What you are talking about is known as Policy-based routing or PBR and it's not supported by the ASA.
What he's talking about is just regular sla-monitoring (tracking static route) wich asa supports, not PBR as on ISR (with route-maps and etc.). So it easily can be done.
Hi Omar,
You can create two default route with different metric value say you have two internet gateways 1.1.1.1 (isp1) and 2.2.2.2 (isp2).
You can have a default route like the below in you ASA
route outisde 0.0.0.0 0.0.0.0 1.1.1.1
route outside 0.0.0.0 0.0.0.0 2.2.2.2 2
If 1.1.1.1(ISP1) fails and not reachable it will take the secondary def route to reach the internet.
Hope this helps.
By
Karthik
Please do rate if the given information helps.
It might be just me, but it sounds like PBR and SLA, still not supported.