Avatar of donohoe1
donohoe1 asked on

Can a Cisco ASA do this?

If we have two internet circuits coming in, each with their own public IP, and they're both connected to the same Cisco ASA, is it possible to route all incoming traffic on one circuit's IP to a specific server and all incoming traffic on the other circuit's IP to a different server?

For example, if you look at my awesome MS Paint diagram, could you route all traffic coming in on to and all traffic coming in on to
RoutersCiscoHardware Firewalls

Avatar of undefined
Last Comment

8/22/2022 - Mon
Ken Boone

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question

The diagram I embarrassingly forgot to attach.
Ken Boone

Oh it was worth the wait for that awesome diagram! ;)


In talking with my Cisco guy he said it might be a problem because I can only define one default gateway to one of my carriers. Thoughts?
Your help has saved me hundreds of hours of internet surfing.
Ken Boone

Well right that is the normal problem of why it couldn't be done.  But PBR solves that problem.  So the ASA has a single default gateway out carrier A.  So server A is nat'd to a public IP on carrier A.  So nothing has to be done for server A for his traffic to flow in out on carrier A.  For server B though which is nat'd on to a public IP on carrier B would have an issue, because his traffic would normally want to be routed out the path of the default gateway.  But using PBR you examine the source IP and determine that it is server B, and therefore you force his next hop to be out carrier B solving that problem.  This is what PBR does.

Great answer and quickly gave me the solution I needed. Thanks again!