How to Route Access-Group to Different Gateway

[thenicktownsend]

I need to change the way a Public Wifi Vlan routes out of my Cisco ASA 5515. Here is the current config

access-group Public-WiFi-IN in interface Public-WiFi
route Outside 0.0.0.0 0.0.0.0 120.22.12.125 1 
route Inside 10.0.0.0 255.0.0.0 172.31.254.65 1

If I change line 2 to: route Outside 0.0.0.0 0.0.0.0 10.99.3.50 1, will this change the way the traffic routes?

Thank you in advance, help is appreciated. 

[Marvin Rhoads]

We need a bit more information to answer your question properly.

Generally speaking, a single context ASA only has one active default route at a given time. If you want your Public wifi subnet to use a different public IP address or upstream gateway, it might have to go out via some other device instead of the ASA.

[thenicktownsend]

That is the plan. I want to send all of the Public-Wifi traffic to a different FW which has its own WAN connections. What other information would you need? 

[Marvin Rhoads]

Then set a different default gateway for the WLC so that it sends the public wif clients' decapsulated CAPWAP traffic (assuming you're not doing wireless FlexConnect which you normally wouldn't for public wifi) out to that other firewall.

The non-public ASA should not have anything to do with the Public wifi traffic abd associated subnet.