You would define the IP address and nameif on another interface, which is connected to the 2nd ISP. ... View more

Hi, You can configure IP SLA to monitor the first ISP, in the event of failure failover to the 2nd ISP.   In the example below traffic uses ISP1 via OUTSIDE_1 interface until the icmp probe to 1.1.1.254 fails, it which point the default route is removed and the route via ISP2 is used for all traffic.   sla monitor 1 type echo protocol ipIcmpEcho 1.1.1.254 interface OUTSIDE_1 threshold 1 frequency 5 sla monitor schedule 1 life forever start-time now track 1 rtr 1 reachability route OUTSIDE_1 0.0.0.0 0.0.0.0 1.1.1.254 1 track 1 route OUTSIDE_2 0.0.0.0 0.0.0.0 2.2.2.254 100 You would need a dynamic NAT for each interface   nat (INSIDE,OUTSIDE_1) after-auto source dynamic any interface nat (INSIDE,OUTSIDE_2) after-auto source dynamic any interface You would obviously need the relevant ACL configured on the outside interfaces.   HTH ... View more

Hi, Here is an example of static NAT, you'll need 1 static NAT entry for each device if you want to ping inbound from the outside. You wouldn't normally do that, unless it was for DMZ hosted services.   object network SWI-1 host 10.10.0.1 nat (INSIDE,OUTSIDE) static 1.1.1.111 object network SWI-2 host 10.10.1.1 nat (INSIDE,OUTSIDE) static 1.1.1.112 access-list OUTSIDE_IN extended permit icmp any object SWI-1 echo access-list OUTSIDE_IN extended permit icmp any object SWI-2 echo If you were just pinging from in inside to outside you would only need 1 dynamic nat rule.   HTH ... View more