Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Setting up a Comcast Broadband connection on ASA5510

What commands are necessary to allow certain pc's connectivity to a Comcast broadband connection on our ASA5510. It has 3 interfaces. 1 is our inside network. 1 is our outside connection for our Stratus Wave ISP which uses a static IP address and the 3rd is a Comcast connection using a DHCP assigned address. I want certain users on the inside to go out over the Comcast connection for their internet access.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Setting up a Comcast Broadband connection on ASA5510

Hello,

Based on what you are telling you want to have to Internet Providers connected to your ASA and you want some users to go out using one ISP and some other users the other ISP. In other words you are trying to do policy-based routing. Unfortunately the ASA does not have the capability of doing such thing. You can configure the ASA to have a backup ISP and this only works when you have one active ISP and another ISP waiting to come alive in case the primary fails. It uses a concept called route tracking.

If you want to do policy-routing I suggest you using a router.

6 REPLIES

Re: Setting up a Comcast Broadband connection on ASA5510

Hello,

Based on what you are telling you want to have to Internet Providers connected to your ASA and you want some users to go out using one ISP and some other users the other ISP. In other words you are trying to do policy-based routing. Unfortunately the ASA does not have the capability of doing such thing. You can configure the ASA to have a backup ISP and this only works when you have one active ISP and another ISP waiting to come alive in case the primary fails. It uses a concept called route tracking.

If you want to do policy-routing I suggest you using a router.

New Member

Re: Setting up a Comcast Broadband connection on ASA5510

I'm running version 8x on the ASA5510. Can I accomplish what I want using STATIC ROUTES? If so...how would I do that? The Comcast ISP connection is using DHCP. The one PC I want to go out over the Comcast connection has an IP address of 172.16.3.31 and the gateway address is pointing to the inside address of the ASA which is 172.16.3.234. Thank you!

Re: Setting up a Comcast Broadband connection on ASA5510

Using Static routes you won't be able because the static routes route the traffic based on the destination not based on the source. If you use Routing tracking it will just let you have a backup ISP that is all, you won't be able to route traffic through that interface while having the other active.

New Member

Re: Setting up a Comcast Broadband connection on ASA5510

Obviously. Thats exactly what the document said. :o)

New Member

Re: Setting up a Comcast Broadband connection on ASA5510

That makes sense about source vs destination.

I just completed a Cisco class on the ASA5510 with version 8.x and I THOUGHT the instructor said you could do what I am attempting (2 ISP's with load balancing) but he didn't elaborate on HOW? I woud think you could do it!

New Member

Re: Setting up a Comcast Broadband connection on ASA5510

Actually, you can. Its called Static Routing Tracking.

http://cisco.com/en/US/docs/security/asa/asa72/configuration/guide/ip.html#wp1090243

607
Views
0
Helpful
6
Replies