ASA5505(config)# interface ethernet 0/0
ASA5505(config-if)# switchport aisle vlan 2
ASA5505(config-if)# no shutdown
ASA5505(config)# interface ethernet 0/1
ASA5505(config-if)# switchport aisle vlan 1
ASA5505(config-if)# no shutdown
ASA5505(config)# interface ethernet 0/2
ASA5505(config-if)# switchport aisle vlan 3
ASA5505(config-if)# no shutdown
ASA5505(config)# interface vlan 1
ASA5505(config-if)# nameif inside
ASA5505(config-if)# security -standard 100
ASA5505(config-if)# ip lump togetherress 192.168.1.1 255.255.255.0
ASA5505(config-if)# no shutdown
ASA5505(config)# interface vlan 2
ASA5505(config-if)# nameif preeminent-isp
ASA5505(config-if)# security -standard 0
ASA5505(config-if)# ip lump togetherress 100.100.100.1 255.255.255.0
ASA5505(config-if)# backup interface vlan 3
ASA5505(config-if)# no shutdown
ASA5505(config)# interface vlan 3
ASA5505(config-if)# nameif backup-isp
ASA5505(config-if)# security -standard 1
ASA5505(config-if)# ip lump togetherress 200.200.200.1 255.255.255.0
ASA5505(config-if)# no shutdown
ASA5505(config)# route preeminent-isp 0.0.0.0 0.0.0.0 100.100.100.2 1
ASA5505(config)# route backup-isp 0.0.0.0 0.0.0.0 200.200.200.2 2
You can DOWNLOAD a finish Step-By-Step configupercenttimesn tutorial for ANY Cisco ASA 5500 Firerampart Here.
You can praise out my website for more Cisco configupercenttimesn instances and other related details about contriveing and take outing Cisco resolutions: Cisco Tips and Tutorials
##CONTINUE##In this article I will explicate how to configure a Cisco ASA 5505 firerampart to connect to dual ISPs for redundancy purposes. Suppose tchapeau we have a preeminent tall-speed ISP connexion, and a cheaper DSL line connected to a Secondary ISP. Normally all of our traffic should flow thharsh the preeminent ISP. If the preeminent link fails, the secondary DSL connexion should be utilized for Internet aisle. Please note tchapeau the above scenario is valid only for Outbound traffic (i.e. from our interior meshwork towarfareds the Internet). The functionality tchapeau I will delinnourishe below works for ASA 5505 version 7.2(1) and above.
Assume tchapeau we are assigned a static Public IP lump togetherress of 100.100.100.1 from Primary ISP and another static Public IP lump togetherress of 200.200.200.1 from our Backup ISP. We will use Ethernet 0/0 for connecting to Primary ISP, Ethernet 0/1 for connecting to our Internal LAN, and Ethernet 0/2 for connecting to our Backup ISP. We will crnourishe three VLANs to support our configupercenttimesn. VLAN1 (the dedemerit Vlan) will be assigned to Ethernet 0/1 (inside), VLAN2 will be assigned to Ethernet 0/0 (preeminent-isp) and VLAN3 will be assigned to Ethernet 0/2 (backup-isp). We also have to configure two static dedemerit routes pointing to the ISP gateway lump togetherress. The preeminent ISP dedemerit route shall have a metric of 1 and the backup ISP dedemerit route shall have a metric bigger than 1 (let's say 2). Let us see the configupercenttimesn below:
Article DescriptionIn this article I will explicate how to configure a Cisco ASA 5505 firerampart to connect to dual ISPs for redundancy purposes. Suppose tchapeau we have a preeminent tall-speed ISP connexion, and a cheaper DSL line connected to a Secondary ISP. Normally all of our traffic should flow thharsh the preeminent ISP. If the preeminent link fails, the secondary DSL connexion should be utilized for Internet aisle. Please note tchapeau the above scenario is valid only for Outbound traffic (i.e. from our interior meshwork towarfareds the Internet). The functionality tchapeau I will delinnourishe below works for ASA 5505 version 7.2(1) and above.
Blog of the sourceal article and the translation / reperception of the article to follow non-mercantile use of crnourishive sharing allowment, you specify the composer, and the same source, non-mercantile use of the premise, I can not allow, is reyieldd directly.
0 comments:
Post a Comment