Solved: Cisco ASA Load sharing between two ISP's

alundin31 · ‎06-27-2008

Hi everyone,

The problem I'm having is that I have four configured interfaces. Two of them going to two different ISP's with two different networks configured. We can call them 10.10.1.0/24 and 10.10.2.0/24. The other two can be 192.168.1.0/24 and 192.168.2.0/24.

The default route is 10.10.1.1 going to ISP #1 and 192.168.1.0/24 is PAT'ed to 10.10.1.20

The problem is that I want to PAT 192.168.2.0/24 to 10.10.2.10 and send that traffic to 10.10.2.1, going to ISP #2.

How would I set this up?

Regards

Andreas

a.alekseev · ‎06-27-2008

This is impossible with ASA, but possible with a router.

Only one possible way is to split your ASA in two context.

and associate 10.10.1.0/24 192.168.1.0/24 with first context and 10.10.2.0/24 192.168.2.0/24 with the second.

But is this case you will lose all vpn functionality.

View solution in original post

a.alekseev · ‎06-27-2008

This is impossible with ASA, but possible with a router.

Only one possible way is to split your ASA in two context.

and associate 10.10.1.0/24 192.168.1.0/24 with first context and 10.10.2.0/24 192.168.2.0/24 with the second.

But is this case you will lose all vpn functionality.

alundin31 · ‎06-30-2008

Thanks for you answer, appreciate it.

meetnnnn_cisco · ‎07-02-2008

Hi, We are freshers going through the article. We couldnt understand clearly your problem and the solution provided. Can u please explain the same.

a.alekseev · ‎07-02-2008

PIX/ASA cannot do load balancing as a router do.

PIX/ASA cannot do policy based routing as a router do.

The default route is 10.10.1.1 going to ISP #1 and 192.168.1.0/24 is PAT'ed to 10.10.1.20

The problem is that Andreas wants to PAT 192.168.2.0/24 to 10.10.2.10 and send that traffic to 10.10.2.1, going to ISP #2.

How can we do this?

using two separated ASA (physicaly or logicaly)

the first - for ISP #1 and 192.168.1.0/24

the second - for ISP #2 and 192.168.2.0/24

If we use logical separation we use contexts on ASA.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml