Solved

Multiple ISP with out BGP and Cisco ASA 5510

Posted on 2007-04-05
2
2,979 Views
Last Modified: 2012-06-27
Hey everyone, my question involves using multiple ISP's without BGP

Here's what I have

ISP connection 1 (one T1) Call them 208.x.x.1 Cisco 2800 1 - inside interface
ISP Connection 2 (2 T1's - Multilink-FrameRelay) 76.x.x.126 Cisco 2800 2 -  Inside Interface

Cisco ASA 5510

12 Internal Subnets - 192.168.1.x - 182,168.12.x

The issue:
ISP connection 1 has been in place for a while now and it is 100% completely saturated
Public IP's are routing to the internal subnets for smtp, http and specific TCP traffic

ISP Connection 2 is a new installation from a different provider

I would like to set this up so that the ASA has one default GW and the external router(s) route the traffic based on where it came from, I.E. if an external smtp request came in on the 208 it goes back out the 208, if it came from inside my network it goes out ISP connection 2 with the exception of the publicly known addresses such as mail hosts, web hosts, etc

Now, I might be completely wrong it even thinking I can do this, but does anyone have any suggestions, example configs, or advice on this one?
0
Comment
Question by:johnstrait
2 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 18863859
Policy Based Routing with SLA monitoring on the 2800 router, combined with static nat and multiple nat globals on the ASA..

Check through these references to get an understanding and then we can come up with something that will work for you
http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00801d1e95.html
http://www.cisco.com/en/US/products/sw/iosswrel/ps5413/products_feature_guide09186a00801d862d.html
http://www.cisco.com/en/US/tech/tk364/technologies_configuration_example09186a0080211f5c.shtml
http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_configuration_guide_chapter09186a00800c60d2.html

Basically, the static nat and globals on the PIX give the 2800 a way to identify which traffic is which that can be established with access-list match, then forwarded to the appropriate next hop based on source IP. The SLA makes sure that next hop route is available. You'll also have to nat again at the 2800 interface since you are using a different ISP.
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question