Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

ASA with two internet connections

Hello!

I am supporting a customer who has an ASA 5510 (8.04) connected to two ISPs. He wants to use one ISP for internet access, and the other ISP to publish several servers from the DMZ with NAT. So, basically splitting the traffic, all internet access going through one ISP and DMZ access for individual servers through the other. As I understand it, this cannot be done with the ASA, because it would require PBR which the ASA cannot do. Am I correct or does anyone have a solution to offer?

Thanks and regards,

Meg Rainbow

3 REPLIES
Cisco Employee

Re: ASA with two internet connections

You are absolutely correct. ASA does not support PBR, and also does not support 2 active default gateways through 2 different interfaces.

If the DMZ server through the second ISP is only going to a particular destination, then you can configure a static route for that particular destination, and you will be able to use the second ISP. However, if you require default gateway as well for the second ISP, then it is not supported on the ASA unfortunately.

Hope that answers your question.

Community Member

Re: ASA with two internet connections

Thanks for your quick reply!

Regards,

Meg Rainbow

Cisco Employee

Re: ASA with two internet connections

Great, pls mark the question as answered. Thanks.

348
Views
0
Helpful
3
Replies
CreatePlease to create content