Solved

Cisco ASA adding another interface

Posted on 2014-09-22
7
246 Views
Last Modified: 2014-09-30
Hi Guys

I have two ISPS that come into the building and I have a Cisco ASA 5510 with two spare interfaces. One of those interfaces is connected to one of my ISPS, can i setup one of the other interfaces to use the new ISP?

And do I have to make sure the new ISP router is in bridged mode?

Thanks a million
0
Comment
Question by:jonathanduane2010
  • 4
  • 2
7 Comments
 
LVL 20

Expert Comment

by:netcmh
ID: 40336359
Yes, you can. Here's an article walking you through the process: http://itcurry4all.blogspot.com/2013/04/cisco-asa-5510-with-dual-isp-redundancy.html

This method would help you fail over to your secondary ISP if primary ISP interface physically goes down .

Another scenario, load balancing: http://www.shanekillen.com/2013/08/cisco-asa-load-balancing-with-dual-isp.html
0
 

Author Comment

by:jonathanduane2010
ID: 40336724
OK,

I have it plugged into eth3 on asa 5510 and trying add it through the GUI and here is a screenshot of the ip address i am trying to add along with the subnet and i have also attached an image of the error message i am getting
newip.png
cisco-error.png
0
 
LVL 20

Expert Comment

by:netcmh
ID: 40336764
the 255.255.255.255 is for a host. What you need is the subnet mask for the gateway of the 2 host network that your ISP segregates it's and your internet connection routers (usually a /28).
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 57

Expert Comment

by:Pete Long
ID: 40340214
MAke sure you have a sec plus licence! (show version)

See Cisco ASA/PIX 8.x: Redundant or Backup ISP Links

PL
0
 

Author Comment

by:jonathanduane2010
ID: 40341325
So that means that the subnet mask is 240?

I have tried that and I am getting "ip address not valid" ?
0
 
LVL 20

Accepted Solution

by:
netcmh earned 500 total points
ID: 40341606
That was just a suggestion. What is the actual subnet your ISPs have handed you?
0
 
LVL 20

Expert Comment

by:netcmh
ID: 40351996
Thanks for the grade. Good luck.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Samba Question 11 77
Manage ASA using outside IP 14 62
software inventory tools 3 40
Basic Client Hyper-V test lab connectivity issue. 7 40
In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question