Secondary fallback/failover network on Cisco ASA
Posted
by
tyranitar
on Server Fault
See other posts from Server Fault
or by tyranitar
Published on 2013-06-27T20:04:06Z
Indexed on
2013/06/27
22:23 UTC
Read the original article
Hit count: 167
In my network there is a Cisco ASA 55x0 with "inside" interface (network 192.168.79.0/24) and "outside" interface (network 89.x.x.48/29)
There is this nat rule:
object network NAToutside
nat (inside,outside) dynamic interface
and the static route
route outside 0.0.0.0 0.0.0.0 89.x.x.49 1
and all ACL rules. Now I have another new outside network by another ISP called "outside2", this network is already natted and the Cisco ASA in in the network 192.168.70.0/24. I would use this network as a fallback one. So I set the nat rule:
object network NAToutside2
nat (inside,outside2) dynamic interface
and the static route with a different metric
route outside2 0.0.0.0 0.0.0.0 192.168.70.1 2
Clearly it doesn't work: when I disconnect the outside ethernet cable no workstation can connect to the Internet throught the outside2 network... What do I need more?
© Server Fault or respective owner