TWO ASA WITH TWO ISP

[jsk.cisco]

Hi ,

We are planning to implement one ISP on Active ASA and second ISP on stanby ASA. Can you please help us how can we achive this topology without any router in between that .

I had just go with ASA failover doc but in that case two isp terminated on router and then goes to ASA . In my case ISP link will directly terminated on each ASA .

Please suggest with some example.

Thanks

[Julio Carvajal]

Hello,

The thing is that both firewalls needs to sit behind the same subnet so the failover can be 100 % successful ( all the interfaces being monitored on the right way) as you said you will need a router and then do PBR on SLA on the router.

Concerning to the ASA I do not see a way to make this work on an active/standby failover as they need to be on the right same subnet.

Regards,

Julio

[Steven Williams]

What do you need to do with these two ISP's? Failover can happen on link that connects the ASA's together which will be on the same subnet.

[patrick.preuss]

maybe this fits https://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml