2 ISP blocks, 2 ASA's
Posted on 2012-03-13
I currently have 2 sites each with their own ASA. We only had 1 ISP block.
We have added a new ISP block so now we have an ISP block for each site.
Each site will be configured to prefer a particular ISP block.
iBGP will be configured between the routers so that if one site fails, the other
will take over.
I am not sure how to configure the ASA interfaces. Each ASA has (4) interfaces.
interface Gi0/0 on both ASA's is in the subnet of the original ISP block.
Neither ASA has an interface configured in the new ISP block. For Nat/Pat to occur,
i need and interface on the ASA's to be in new ISP block.
My goal: Because each ASA will be a failover for the other,I will need the ability for each ASA to Nat/Pat both ISP blocks. (My 10.x.x.x addresses will be assigned to ISP block A and my 192.168.x.x addresses will be assigned to ISP block B)
Can I configure Gi0/3 on each ASA with the new ISP block subnet address thereby having (2) outside interfaces, 1 for each ISP block?
To make sure ibgp works will I need (2) neighbor statements on each ASA such as:
router bgp 23064
network 216.x.x.0 mask 255.255.255.0
network 12.x.x.x 255.255.255.192
neighbor 12.x.x.77 remote-as "telco as#"
neighbor 12.x.x.77 send-community
neighbor 12.x.x.77 route-map SETLP out
neighbor 216.x.x.11 remote-as "my as#"
neighbor 216.x.x.11 next-hop-self
neighbor 12.x.x.1 remote-as "My as#"
neighbor 12.x.x.1 next-hop-self