Solved

CISCO ASA 5510 and  2 ISP's

Posted on 2013-11-26
3
391 Views
Last Modified: 2013-12-01
Hi ALL

I have a Cisco 5510 with 2 DMZ interfaces and an outside & inside interface also. The outside interface is connected to our internet router interface, another interface is connected to our ISP.The ASA is configured to NAT translate IP addresses on the  DMZ to configured public addresses from our current ISP. We are due to migrate to a ISP with 6 times the bandwidth the second ISP is connected to another interface on the internet router.

The question I ask is would it be possible as part of a migration process to be able to configure  the ASA with the second ISP's public addresses also so that I can systematically move DMZ devices from the old ISP to the new ISP public addresses one at a time ???

Thanks
0
Comment
Question by:s1mwat
  • 2
3 Comments
 
LVL 17

Accepted Solution

by:
Garry-G earned 500 total points
ID: 39680610
Configuring another external interface for the connection to the new ISP shouldn't be the problem, but routing most likely is ... as the ASA does not support "clean" PBR, it might be difficult to keep the devices reachable ... or rather, keep the answers going back out the right interface ... setting outgoing routes to one interface or the other will work, but for allowing remote access to DMZ devices you'd need to keep remote IPs reachable on either interface, depending on the target of the communication ...
0
 

Author Comment

by:s1mwat
ID: 39681155
Thanks, I presume also that I cannot place a secondary address on the outside interface so that the Internet router can deal with PBR ??
0
 
LVL 17

Expert Comment

by:Garry-G
ID: 39681579
You don't need a secondary on the outside, you can just route the net through the ASA ... should work just fine ...
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Network Switch Connections 8 60
How to setup PLEX PLUS on 2 computers 2 53
Firewall report connections 8 71
Patch panel 7 35
Do you have a computer or other electronic gear that is attached to a rat nest of cables, or alternatively have your cables all bundled nice at neat?  If so then read this post to sidstep common pitfalls. When I was a student at DeVry University,…
Hello All, I have been training on Multicast for a while now and whenever I start the topic , I find out that my friends /  Colleagues mention that they do not know how to test Multicast Joins. As most of the multicast would be video traffic and …
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question