Avatar of donohoe1
donohoe1 asked on

Can a Cisco ASA do this?

If we have two internet circuits coming in, each with their own public IP, and they're both connected to the same Cisco ASA, is it possible to route all incoming traffic on one circuit's IP to a specific server and all incoming traffic on the other circuit's IP to a different server?

For example, if you look at my awesome MS Paint diagram, could you route all traffic coming in on 10.0.0.10 to 192.168.0.20 and all traffic coming in on 172.16.0.10 to 192.168.0.30?
RoutersCiscoHardware Firewalls

Avatar of undefined
Last Comment
donohoe1

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Ken Boone

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
donohoe1

The diagram I embarrassingly forgot to attach.
Ken Boone

Oh it was worth the wait for that awesome diagram! ;)
ASKER
donohoe1

Thanks!

In talking with my Cisco guy he said it might be a problem because I can only define one default gateway to one of my carriers. Thoughts?
Your help has saved me hundreds of hours of internet surfing.
fblack61
Ken Boone

Well right that is the normal problem of why it couldn't be done.  But PBR solves that problem.  So the ASA has a single default gateway out carrier A.  So server A is nat'd to a public IP on carrier A.  So nothing has to be done for server A for his traffic to flow in out on carrier A.  For server B though which is nat'd on to a public IP on carrier B would have an issue, because his traffic would normally want to be routed out the path of the default gateway.  But using PBR you examine the source IP and determine that it is server B, and therefore you force his next hop to be out carrier B solving that problem.  This is what PBR does.
ASKER
donohoe1

Great answer and quickly gave me the solution I needed. Thanks again!