Cisco Support Community
Community Member

Adding a 2nd ISP to network

I have a client whom is currently suffering from lack of bandwidth. They get constant complaints from users that the Internet is slow.

The current connection for the company is Dual homed. They have 1 T1 inbound from AT&T and another one from XO communications. These two routers run an HSRP address between them (hypothetical on their Ethernet interfaces (hypothetical and .3)so that the ASA appliance can talk to one address. The outside interface of the ASA is (hypothetical

One of the managers at this company wants to implement another DSL solution that will add 3MG of bandwidth to the Issue and I need to figure out how to Integrate this.

Can I implement two IP addresses on the outside interface of the ASA? Also right now the ASA has a route to the Internet router HSRP address of the current network. Can I add a second route to the new address of the new DSL router? Will the ASA load balance?

I am not exactly sure how to implement this. I have added a diagram if anyone can help figure this out.



Hall of Fame Super Silver

Re: Adding a 2nd ISP to network

Hello Kevin,

the ASA should be able to support two default static routes but only if all next-hops are in the same interface.

egress interface can only be one being this a firewall.

on the other end if secondary ip addresses are not supported you should put all on the same IP subnet.

>> After selecting egress interface using any method described above, an additional route lookup is performed to find out suitable next hop(s) that belong to previously selected egress interface


looking at command reference

unfortunately I don't see any secondary option:

so the requirement is to put all devices in the same IP subnet associated to outside interface.

multiple default static routes with different IP next-hops should be supported as explained in first link to config guide.

Hope to help


Community Member

Re: Adding a 2nd ISP to network


Maybe you can place a router between the ASA and the ISP connections. On that router, you can run policy based routing to select appropriate paths depending upon the type of traffic you have.

For example, we send our web browsing, FTP and VPN client traffic out our high-speed Internet connection and the rest of the traffic (e.g. email) out the T-1.


CreatePlease to create content