Passing traffic from outside -> outside1 and outside interface on ASA 5520

[syedali001]

Is it possible to pass traffic from an  Avaya PBX -> ASA5520 on outside (security level 100) and outside1 (security level 100) to another ASA 5520 on an outside interface (security 100) and then internally to voice vlan. See diagram for better understanding. Is this possible anything to look out for? I will be using static routes

[Jennifer Halim · Accepted solution]

I don't see a reason why it wouldn't.

A couple of things to be aware off:

- For traffic between same security level, you would need to turn on "same-security-traffic permit inter-interface"

- As you have mentioned, you will be configuring static routes on all interfaces, that would be the way to go as you can't have 2 default gateways pointing towards 2 outside interfaces.

- I am also assuming that you will not be NATing the voice traffic, and the left hand side ASA has inside interface of security level of 100 as well, then you can either disable nat-control, or configure NAT exemption.

Hope that helps.

[syedali001]

Thank you very much for you answer was very helpful