- Posts: 1
- Thank you received: 0
ASA5510-ADDING A SECOND INTERFACE TO ACCESS INTERNET
16 years 1 month ago #27809
by mattf-123
ASA5510-ADDING A SECOND INTERFACE TO ACCESS INTERNET was created by mattf-123
I realize this may be an easy one, but any help would be appreciated.
Current Config:
INTERNET Provder1---CISCO 1700 ROUTER----ASA5510----Catalyst2900----clients
We are considering a secondary internet provider that is offering a trial to see how our needs react to their speeds provided. Trying to transition from 768 dedicated to Comcast business. Not sure how good Comcast is. Anyway, I'd like to add a secondary interface to the ASA and force all of my traffic through it. I have no issues with editing the security policies or even adding a second interface.
Just have not been able to get clients up on the new internet service.
Desired Config:
Internet Provider1Cisco1700 & Provider2SMC8014 ---- ASA5510 --- Catalyst2900
clients
I'm pretty sure the error lies in my routes, but am not certain.
Is what I am attempting possible?
Current Config:
INTERNET Provder1---CISCO 1700 ROUTER----ASA5510----Catalyst2900----clients
We are considering a secondary internet provider that is offering a trial to see how our needs react to their speeds provided. Trying to transition from 768 dedicated to Comcast business. Not sure how good Comcast is. Anyway, I'd like to add a secondary interface to the ASA and force all of my traffic through it. I have no issues with editing the security policies or even adding a second interface.
Just have not been able to get clients up on the new internet service.
Desired Config:
Internet Provider1Cisco1700 & Provider2SMC8014 ---- ASA5510 --- Catalyst2900
clients
I'm pretty sure the error lies in my routes, but am not certain.
Is what I am attempting possible?
16 years 1 month ago #27821
by ZiPPy
ZiPPy
Replied by ZiPPy on topic Re: ASA5510-ADDING A SECOND INTERFACE TO ACCESS INTERNET
Is your intention to have both ISPs connected to the ASA5510, but only allow for one of them to be active? That way if your not satisfied or run into issues, you can simply switch over?
I haven't worked with the ASA5510, only the 5505, but I noticed that the 5510 has an extra slot. So, adding the second interface is possible as I'm sure you already know.
Now that I think about it and looking at your diagram you would need two interfaces on both units, the 1700 and the ASA. Each WIC-1DSU-T1 would be configured with there corresponding ISPs on the 1700. From the 1700 is where you would make the connection live to the ASA5510, with of course the second interface installed on the ASA.
I might be making this more complicated than necessary, sorry
What do you guys think? We need the ASA experts to jump in on this one. PIX guys too!
ZiPPy
I haven't worked with the ASA5510, only the 5505, but I noticed that the 5510 has an extra slot. So, adding the second interface is possible as I'm sure you already know.
Now that I think about it and looking at your diagram you would need two interfaces on both units, the 1700 and the ASA. Each WIC-1DSU-T1 would be configured with there corresponding ISPs on the 1700. From the 1700 is where you would make the connection live to the ASA5510, with of course the second interface installed on the ASA.
I might be making this more complicated than necessary, sorry
What do you guys think? We need the ASA experts to jump in on this one. PIX guys too!
ZiPPy
ZiPPy
16 years 1 month ago #27824
by S0lo
Not sure I get your desired config here. Do you want to connect the new interface of the ASA directly to the second provider? or do you want to connect it to the Cisco 1700 and then connect that to the second provider using another interface on the 1700?
A dump of your current configs for both the ASA and the 1700 can also help us help you. (you can mask out private info).
Studying CCNP...
Ammar Muqaddas
Forum Moderator
www.firewall.cx
Replied by S0lo on topic Re: ASA5510-ADDING A SECOND INTERFACE TO ACCESS INTERNET
Desired Config:
Internet Provider1Cisco1700 & Provider2SMC8014 ---- ASA5510 --- Catalyst2900
clients
Not sure I get your desired config here. Do you want to connect the new interface of the ASA directly to the second provider? or do you want to connect it to the Cisco 1700 and then connect that to the second provider using another interface on the 1700?
A dump of your current configs for both the ASA and the 1700 can also help us help you. (you can mask out private info).
Studying CCNP...
Ammar Muqaddas
Forum Moderator
www.firewall.cx
Time to create page: 0.121 seconds