Multiple ISP in single ASA

[bberry]

Hello,

I hope this is in the right group. I am looking to see if it is possible to have two different IPSs in the same ASA and then statically route traffic over the second ISP. I have an ASA today that is connected to my ISP and is configured to handle just our site-to-site tunnels. I want to see if I can add a second ISP and then statically route specific traffic through this ASA and out the secondary ISP. I have never had an ASA that had two different ISP let alone try to get different traffic to flow to them. Suggestions??

Brent

[Chakshu Piplani]

Hi Brent,

You will need to use PBR (policy based routing) for this, please go through these docs:

https://integratingit.wordpress.com/2020/03/01/asa-policy-based-routing/

https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/general/asa-94-general-config/route-policy-based.html

There are many other examples available online that will come up on google search for policy based routing on ASA.

Regards,

Chakshu

Do rate helpful posts!

[bberry]

Chakshu,

Any design guide or documentation on getting the second ISP link working without it being a failover link for the primary ISP? I think I still need to configure routing for the new link but need to make sure I do not effect routing for what is currently in production. This is my first time configuring an ASA for multiple ISPs.

Thanks,

Brent