Secondary fallback/failover network on Cisco ASA

Posted by tyranitar on Server Fault See other posts from Server Fault or by tyranitar
Published on 2013-06-27T20:04:06Z Indexed on 2013/06/27 22:23 UTC
Read the original article Hit count: 143

Filed under:
|
|

In my network there is a Cisco ASA 55x0 with "inside" interface (network 192.168.79.0/24) and "outside" interface (network 89.x.x.48/29)

There is this nat rule:

object network NAToutside
 nat (inside,outside) dynamic interface

and the static route

route outside 0.0.0.0 0.0.0.0 89.x.x.49 1

and all ACL rules. Now I have another new outside network by another ISP called "outside2", this network is already natted and the Cisco ASA in in the network 192.168.70.0/24. I would use this network as a fallback one. So I set the nat rule:

object network NAToutside2
 nat (inside,outside2) dynamic interface

and the static route with a different metric

route outside2 0.0.0.0 0.0.0.0 192.168.70.1 2

Clearly it doesn't work: when I disconnect the outside ethernet cable no workstation can connect to the Internet throught the outside2 network... What do I need more?

© Server Fault or respective owner

Related posts about networking

Related posts about cisco-asa