configure Dual ISP IP's on Cisco Router or ASA

hey everyone,

We got 2 Subnets of IP range and want to configure them both on a Cisco router 2801 or on an ASA 5505.

currently I have one ISP subnet configured between my 2801 router and my ASA 5505 firewall.

the idea we got a second subnet in case of a failover.

I ordered a WIC module interface for the router since I now only have 2 fast ethernet interfaces.

how I could do dual route on the router in case one link down it take the second link by default without intervention of any.

I have heard about a failover procedure on an ASA. could you please explain it to me or guide me to a good article explaining the idea behind a failover and how to configure it.

is it possible to also configure the 2 subnets on the ASA in case one subnet failed it take the second path?

until I got the WIC module to install it on the router, I am thinking of configuring the new subnet on the ASA firewall and allow only one PC to be routed through this subnet only. it is the server that do only the updates that I want it to use this subnet only.

thanks in advance

I not sure about the ASA stuff. But you can use BGP to prefer a circuit (ingress / egress) and failover to the secondary link if the primary link breaks. You'd just need your provider to originate a default route to you else it will crush your router.

Also, if redundancy is that important you really should get another router and use a different ISP.

how I could do dual route on the router in case one link down it take the second link by default without intervention of any.

Incase that you use one router you could use tracking.
www.cisco.com/en/US/docs/ios/12_2t/12_2t.../guide/fthsrptk.html

If you have a different router for each connection you could use HSRP.
www.cisco.com/en/US/docs/switches/blades...on/guide/swhsrp.html

I have heard about a failover procedure on an ASA. could you please explain it to me or guide me to a good article explaining the idea behind a failover and how to configure it.

Yes this is also possible with the right license.
www.cisco.com/en/US/products/hw/vpndevc/...186a00806e880b.shtml

is it possible to also configure the 2 subnets on the ASA in case one subnet failed it take the second path?

Yep again with the right license. You can see if you have it using the "show version" command on the ASA. Its under "Dual ISP".


I hope this helps you out a bit. If you need more in depth info dont hesitate to post again ^^




Ron.