Link to home
Start Free TrialLog in
Avatar of donohoe1
donohoe1

asked on

Can a Cisco ASA do this?

If we have two internet circuits coming in, each with their own public IP, and they're both connected to the same Cisco ASA, is it possible to route all incoming traffic on one circuit's IP to a specific server and all incoming traffic on the other circuit's IP to a different server?

For example, if you look at my awesome MS Paint diagram, could you route all traffic coming in on 10.0.0.10 to 192.168.0.20 and all traffic coming in on 172.16.0.10 to 192.168.0.30?
ASKER CERTIFIED SOLUTION
Avatar of Ken Boone
Ken Boone
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of donohoe1
donohoe1

ASKER

User generated image
Oh it was worth the wait for that awesome diagram! ;)
Thanks!

In talking with my Cisco guy he said it might be a problem because I can only define one default gateway to one of my carriers. Thoughts?
Well right that is the normal problem of why it couldn't be done.  But PBR solves that problem.  So the ASA has a single default gateway out carrier A.  So server A is nat'd to a public IP on carrier A.  So nothing has to be done for server A for his traffic to flow in out on carrier A.  For server B though which is nat'd on to a public IP on carrier B would have an issue, because his traffic would normally want to be routed out the path of the default gateway.  But using PBR you examine the source IP and determine that it is server B, and therefore you force his next hop to be out carrier B solving that problem.  This is what PBR does.
Great answer and quickly gave me the solution I needed. Thanks again!