Is it possible to utilize two separate internet connections with 1 Cisco ASA to segregate traffic


I am trying to segregate two VLANs on my network to use two seperate internet lines from the same ASA.  Is there a way to make this happen (if so, how?), or am I going to have to purchase another ASA to make this work?  Any input is greatly appreciated!!

Thank you all for taking a look at the question!

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Don JohnstonInstructorCommented:
Yes, this can be done.

You will need to use PBR (Policy Based Routing) to direct specific traffic to use one of the links.  

And if you want it to failover should a link go down, you can accomplish that with Object Tracking.

This is a template for PBR that will have servers using ISP 1 and PC's using ISP 2.

int f0/1
 description outside interface 1
 int f0/2
 description outside interface 2
int f0/0
 description inside interface
 ip policy route-map alpha
route-map alpha permit 10
 match ip address server
 set ip next-hop <next-hop IP for ouside interface 1>
route-map alpha permit 20
 match ip address pc
 set ip next-hop <next-hop IP for outside interface 2>
ip access-list standard server
 permit <server ip network>
ip access-list standard pc
 permit <pc_networks>

Open in new window

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
TechGuy_007Author Commented:
Thanks Don!  I will set this up and report back.  I really appreciate your prompt response!
TechGuy_007Author Commented:
Thanks again!!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.