asked on

ASA5510 Dual ISP

We have a cisco ASA 5510, about to have a second ISP added to one of the external ports.

E/01 will be 1.1.1.0 (this is the existing)
E/02 will be 1.12.2.0 (new)

We will want to route all normal internet browsing to the new one. We want to leave all other functions on the old one, email, web, edi, etc...

currently we have a static route 0.0.0.0 to 1.1.1.1 (this is the existing gateway for above network)

How can I get all internal browsing and ftp to go out the new ISP? I am more familiar with Watchguard and that was pretty straight forward. Not sure about the ASA5510

anoopkmr

From cisco Site..

Q. Can Cisco 5500 Series ASA do a Policy Based Routing (PBR) like Cisco Router? For example, mail traffic should be routed to first ISP while http traffic should be routed to the second one.

A. Unfortunately, there is no way to do policy-based routing on the ASA at this time. It can be a feature that is added to the ASA in the future.

Note: The route-map command is used to redistribute routes between routing protocols, such as OSPF and RIP, with the use of metrics and not to policy route regular traffic as in routers.

tech0803

ASKER

So by default it cannot do policy based routing? How can I tell if the feature is installed? What feature is it?

anoopkmr

its a feature cisco supposed to include in the ASA 9.x version , but still its not officially released .. you dont need to check anything .

tech0803

ASKER

So we have to pick one to use for everything correct? Cannot believe it would take Cisco so long to make the ASA 5500 series capable of doing this. Watchguard has done it for years

ASKER CERTIFIED SOLUTION

lruiz52

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

tech0803

ASKER

Crap, I chose the wrong solution. It should go to anoopkmr with an assit by lruiz52