SysAdmin Valley » firewall http://www.sysadminvalley.com I might as well write this stuff down so I remember it tomorrow Wed, 25 Jan 2012 15:06:43 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Configuring Cisco ASA 5505 with primary & backup ISP http://www.sysadminvalley.com/2010/03/23/configuring-cisco-asa-5505-with-primary-backup-isp/ http://www.sysadminvalley.com/2010/03/23/configuring-cisco-asa-5505-with-primary-backup-isp/#comments Tue, 23 Mar 2010 13:13:44 +0000 mshields http://www.sysadminvalley.com/?p=222 Here’s an example config for configuring an Cisco ASA5505 with primary and backup ISP’s.

ASA5505(config)# interface ethernet 0/0
ASA5505(config-if)# switchport access vlan 2
ASA5505(config-if)# no shutdown

ASA5505(config)# interface ethernet 0/1
ASA5505(config-if)# switchport access vlan 1
ASA5505(config-if)# no shutdown

ASA5505(config)# interface ethernet 0/2
ASA5505(config-if)# switchport access vlan 3
ASA5505(config-if)# no shutdown

ASA5505(config)# interface vlan 1
ASA5505(config-if)# nameif inside
ASA5505(config-if)# security-level 100
ASA5505(config-if)# ip address 192.168.1.1 255.255.255.0
ASA5505(config-if)# no shutdown

ASA5505(config)# interface vlan 2
ASA5505(config-if)# nameif primary-isp
ASA5505(config-if)# security-level 0
ASA5505(config-if)# ip address 100.100.100.1 255.255.255.0
ASA5505(config-if)# backup interface vlan 3
ASA5505(config-if)# no shutdown

ASA5505(config)# interface vlan 3
ASA5505(config-if)# nameif backup-isp
ASA5505(config-if)# security-level 1
ASA5505(config-if)# ip address 200.200.200.1 255.255.255.0
ASA5505(config-if)# no shutdown

ASA5505(config)# route primary-isp 0.0.0.0 0.0.0.0 100.100.100.2 1
ASA5505(config)# route backup-isp 0.0.0.0 0.0.0.0 200.200.200.2 2
]]> http://www.sysadminvalley.com/2010/03/23/configuring-cisco-asa-5505-with-primary-backup-isp/feed/ 0