We have tow ISP links terminated on two routers WAN ports ( 1841 series). And the ethernet both the routers and the outside of the ASA are from a single subnet. ( a.b.c.0 / 24 ). Since the tow ISP's has given us a totally seperate pool of IP address we need to route the corresponding IP packet to the corresponding ISP routers. Policy based IP routing ( in this case source based for the packet going to outside world from ASA ) is not supported in ASA and we are required to use route map.
ASA has a default route to ISP-1 router ethernet. But when packet is having the source IP address from from the ISP-2 pool it shoud be sent to ISP-2 router.
I did the following configuration
on ISP-1 router:-
access-list 101 permit ip host P.Q.R.S ( IP address from the ISP-2 pool)
route map ISP2
match access-group 101
set next-hop ISP-2_router_Eth_ADDRESS
int fast0/0 ( ISP1 router interface)
ip policy route-map ISP2
With this packets with source IP with P.Q.R.S will be sent to ISP-2 router ethernet port and the remaining packets will be routed by default to WAN link that is ISP-1 WAN link.
But some how this doesnt seem to work I checked out for the access-list hit count there are not hits.
What is going wrong?
Please share your experience for route maps or terminating two ISP on a single ASA. Inputs are appreciated.
Thanks in advance