Solved: Cisco ASA 5510 and Multiple Outside Interfaces Problem

amorguettat · ‎01-19-2016

We have an Cisco ASA 5510 firewall. There are 4 ports on it configured as 2 outside, and 2 inside.

We have two cable modems attached to the outside ports.

Our plan is to have the "inside1" port directed to one outside port/cable modem,

and the "inside2" port directed to the other outside port/cable modem.

We have been able to get the "inside1-to-outside1" setup to work but not the "inside2-to-outside2" setup (at least at the same time).

First off, is this possible? If so, what are we likely missing - some way to have a second default route for the outside2?

Karsten Iwen · ‎01-19-2016

For this scenario to work you need Policy-Based Routing (PBR) which was introduced in ASA release 9.4(1) and is only available for ASA-X platforms.

View solution in original post

Karsten Iwen · ‎01-19-2016

For this scenario to work you need Policy-Based Routing (PBR) which was introduced in ASA release 9.4(1) and is only available for ASA-X platforms.

amorguettat · ‎01-19-2016

Does the firewall asa 5510 support the "ASA release 9.4(1)" ?

How can I downolad the "ASA release 9.4(1)" ?

Karsten Iwen · ‎01-19-2016

No, the legacy (EOL announced) ASAs (without -X in the name) don't run the newer software. If you really need that feature it's time for a new firewall. If the 5510 is fine from the performance, then a replacement-product could be the 5508-X. If you need some more power, the 5516-X is for you:

http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/datasheet-c78-733916.html

amorguettat · ‎01-27-2016

We can use Cisco ASA 5515-X ???

Karsten Iwen · ‎01-27-2016

Yes, that's also an -X model. I wouldn't recommend the 5515-X nowadays. The 5516-X is only slightly more expensive, and gives you more power. If you don't need the power of the 5516-X, then the 5508-X is a good buy.

But still, the 5515-X can do that.