Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Cisco ASA adding another interface

Posted on 2014-09-22
7
Medium Priority
?
252 Views
Last Modified: 2014-09-30
Hi Guys

I have two ISPS that come into the building and I have a Cisco ASA 5510 with two spare interfaces. One of those interfaces is connected to one of my ISPS, can i setup one of the other interfaces to use the new ISP?

And do I have to make sure the new ISP router is in bridged mode?

Thanks a million
0
Comment
Question by:jonathanduane2010
  • 4
  • 2
7 Comments
 
LVL 21

Expert Comment

by:netcmh
ID: 40336359
Yes, you can. Here's an article walking you through the process: http://itcurry4all.blogspot.com/2013/04/cisco-asa-5510-with-dual-isp-redundancy.html

This method would help you fail over to your secondary ISP if primary ISP interface physically goes down .

Another scenario, load balancing: http://www.shanekillen.com/2013/08/cisco-asa-load-balancing-with-dual-isp.html
0
 

Author Comment

by:jonathanduane2010
ID: 40336724
OK,

I have it plugged into eth3 on asa 5510 and trying add it through the GUI and here is a screenshot of the ip address i am trying to add along with the subnet and i have also attached an image of the error message i am getting
newip.png
cisco-error.png
0
 
LVL 21

Expert Comment

by:netcmh
ID: 40336764
the 255.255.255.255 is for a host. What you need is the subnet mask for the gateway of the 2 host network that your ISP segregates it's and your internet connection routers (usually a /28).
0
IT Degree with Certifications Included

Aspire to become a network administrator, network security analyst, or computer and information systems manager? Make the most of your experience as an IT professional by earning your B.S. in Network Operations and Security.

 
LVL 58

Expert Comment

by:Pete Long
ID: 40340214
MAke sure you have a sec plus licence! (show version)

See Cisco ASA/PIX 8.x: Redundant or Backup ISP Links

PL
0
 

Author Comment

by:jonathanduane2010
ID: 40341325
So that means that the subnet mask is 240?

I have tried that and I am getting "ip address not valid" ?
0
 
LVL 21

Accepted Solution

by:
netcmh earned 2000 total points
ID: 40341606
That was just a suggestion. What is the actual subnet your ISPs have handed you?
0
 
LVL 21

Expert Comment

by:netcmh
ID: 40351996
Thanks for the grade. Good luck.
0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Originally, this post was published on Monitis Blog, you can check it here . It goes without saying that technology has transformed society and the very nature of how we live, work, and communicate in ways that would’ve been incomprehensible 5 ye…
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

572 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question