cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
676
Views
0
Helpful
3
Replies

ASA with two internet connections

giamwi
Level 1
Level 1

Hello!

I am supporting a customer who has an ASA 5510 (8.04) connected to two ISPs. He wants to use one ISP for internet access, and the other ISP to publish several servers from the DMZ with NAT. So, basically splitting the traffic, all internet access going through one ISP and DMZ access for individual servers through the other. As I understand it, this cannot be done with the ASA, because it would require PBR which the ASA cannot do. Am I correct or does anyone have a solution to offer?

Thanks and regards,

Meg Rainbow

3 Replies 3

Jennifer Halim
Cisco Employee
Cisco Employee

You are absolutely correct. ASA does not support PBR, and also does not support 2 active default gateways through 2 different interfaces.

If the DMZ server through the second ISP is only going to a particular destination, then you can configure a static route for that particular destination, and you will be able to use the second ISP. However, if you require default gateway as well for the second ISP, then it is not supported on the ASA unfortunately.

Hope that answers your question.

Thanks for your quick reply!

Regards,

Meg Rainbow

Great, pls mark the question as answered. Thanks.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: