Separate traffic by protocol - multiple internet interfaces

[gregbeifuss]

Hello,

I would like to connect a second ISP link to our ASA 5510 to solely serve http traffic from our organization's employees (ie. web surfing). We currently have all employee traffic and two site-to-site VPN tunnels connecting to the internet from this firewall. I want to keep the tunnels as currently configured on the existing connection and split out http/https traffic from our staff onto a less costly link.

How would I go about doing this?

Thanks!
Greg

[Dennis Mink]

Greg,

Normally you could use Policy based routing, but the ASA does not support this (yet), if you have a router in front of the ASA (so between the ISPs and your ASA), you could use PBR to split traffic between providers.

check out this post:

https://supportforums.cisco.com/docs/DOC-6069    it contains a discussion around using NAT to engineer what you are trying to achieve.

please rate if usefull.

Dennis