Routing to 2 different connections

[ejdrijin1]

Hi,

Currently my ASA consists of 1 internal network and 1 external network. Traffic passes from the internal netwrok and goes to the external for Internet connectivity.

There is a NAT rule and a static rule which says any traffic to any destination goes to this external network.

Now I have created an addition vlan, which its defualt gateway is the Cisco ASA. I want the traffic of this connection to go to the internet with a seperate connection than the current external connection.

How can this be done since there is already the static rule which says that traffic pass from external connection 1?

Thanks in advance.

[Julio E. Moisa]

Hi

If you already have configured the ACLs you can create other NAT just for this specific VLAN, for example:

int g0/0.10

vlan 10

nameif NEWVLAN

security-level 100

ip add 192.168.10.1 255.255.255.0

no shutdown

access-list NEW-VLAN-ACL extended permit ip any any 

access-group NEW-VLAN-ACL in interface NEWVLAN

object network NAT-NEW-VLAN
subnet 192.168.10.0 255.255.255.0

nat (NEWVLAN,OUTSIDE) dynamic interface

[ejdrijin1]

Hi,

Thanks for your reply. I did the setup like this but still no luck.

My theory for this not working is, that there is a static route saying that any traffic should go to the Gateway of the existing Internet connection.

Although I have the NAT rule:

nat (NEWVLAN,NEWOUTSIDE) dynamic interface

I think traffic is still trying to be routed to the existing outside interface.

Does this make sense?

Thanks.

[ejdrijin1]

If I NAT the GuestWifi inside interface to the current connection, the Internet will work, 99% coz of the static route stating that any traffic is passed from this gateway.

How can I have another route for just the guest wifi traffic?

Thanks.

[Georg Pauwen]

Hello,

if your ASA runs code 9.4 or later, route maps are supported, as in the example below:

access-list VLAN_1 extended permit ip 192.168.1.0 0.0.0.255 any

access-list VLAN_2 extended permit ip 192.168.2.0 0.0.0.255 any

route-map PBR_VLAN permit 10
(config-route-map)#match ip address VLAN_1
(config-route-map)#set ip next-hop x.x.x.x

route-map PBR_VLAN permit 20
(config-route-map)#match ip address VLAN_2
(config-route-map)#set ip next-hop y.y.y.y

[ejdrijin1]

Thanks for your reply.

Still no luck. 

I am suspecting that I am missing some routes.

What are you thoughts?

Thanks