Skip to main content

ASA5510-ADDING A SECOND INTERFACE TO ACCESS INTERNET

More
16 years 1 month ago #27809 by mattf-123
I realize this may be an easy one, but any help would be appreciated.

Current Config:

INTERNET Provder1---CISCO 1700 ROUTER----ASA5510----Catalyst2900----clients

We are considering a secondary internet provider that is offering a trial to see how our needs react to their speeds provided. Trying to transition from 768 dedicated to Comcast business. Not sure how good Comcast is. Anyway, I'd like to add a secondary interface to the ASA and force all of my traffic through it. I have no issues with editing the security policies or even adding a second interface.
Just have not been able to get clients up on the new internet service.

Desired Config:
Internet Provider1Cisco1700 & Provider2SMC8014 ---- ASA5510 --- Catalyst2900
clients

I'm pretty sure the error lies in my routes, but am not certain.
Is what I am attempting possible?
More
16 years 1 month ago #27821 by ZiPPy
Is your intention to have both ISPs connected to the ASA5510, but only allow for one of them to be active? That way if your not satisfied or run into issues, you can simply switch over?

I haven't worked with the ASA5510, only the 5505, but I noticed that the 5510 has an extra slot. So, adding the second interface is possible as I'm sure you already know.

Now that I think about it and looking at your diagram you would need two interfaces on both units, the 1700 and the ASA. Each WIC-1DSU-T1 would be configured with there corresponding ISPs on the 1700. From the 1700 is where you would make the connection live to the ASA5510, with of course the second interface installed on the ASA.

I might be making this more complicated than necessary, sorry :?

What do you guys think? We need the ASA experts to jump in on this one. PIX guys too! 8)


ZiPPy

ZiPPy
More
16 years 1 month ago #27824 by S0lo

Desired Config:
Internet Provider1Cisco1700 & Provider2SMC8014 ---- ASA5510 --- Catalyst2900


clients


Not sure I get your desired config here. Do you want to connect the new interface of the ASA directly to the second provider? or do you want to connect it to the Cisco 1700 and then connect that to the second provider using another interface on the 1700?

A dump of your current configs for both the ASA and the 1700 can also help us help you. (you can mask out private info).

Studying CCNP...

Ammar Muqaddas
Forum Moderator
www.firewall.cx
Time to create page: 0.121 seconds