New ASA generation support PBR or no & ISPs links redundancy

Please i need to know if the cisco ASA next generation specially ASA 5515X support PBR or no
If yes please tell me how to implement it , and if no then what is the solution here (any solution if possible please)??????
Also if i have many internet connections and i need to dedicate 2 ISP’s ADSL internet lines to certain service (such as mail) if the 1st fail, so the 2nd line come up to make redundancy with it ----------- Is this available on cisco ASA next generation, please if yes provide me how to implement it or give me any configuration example.

Hi,
To my understanding there is still no official support for PBR on the ASA.
When I was at Cisco Live! 2013 London, they talked about PBR in one session and told it might be coming. On the other hand I heard from elsewhere that its not currently in the plans for ASA. I am not really sure what to believe.
To this date all the solutions related to dividing traffic between different ISP links has had something to do with NAT configurations on the ASA.
I have actually tested a setup on the original ASA5500 series devices with new software and have been able to select the outgoing interfaces of the traffic based on the source address using NAT. I have not implemented this in production environment as I dont know what will happen to it when I next upgrade the device maybe. I rather used methods that are officially supported than rig something to production network.
I am not sure exactly what kind of setup you are trying to implement. Using  a 2 ISP setup where only 1 ISP link is active at a time is pretty basic I suppose. There you track the main ISP link and when it fails you move traffic to use the Secondary ISP.
When we implement Dual ISP setups for our customers we naturally have both links connected to our network in separate parts of the core network. Therefore the customer can keep the same public IP address space through both links. Though naturally in these cases the routers in front of the ASAs handle the Primary and Secondary connection routing and not any Cisco firewall. I have never configured an 2 ISP solution using ASA directly in a production enviroment. Its always been handled by the routers in front of the ASA.
So to answer in short, you should be able to configure a Dual ISP setup where 1 of the links is Active on pretty much any ASA model. To my understanding the ASA5505 is perhaps the only limitation but I am not 100% sure.
Here is one (old) basic configuration guide for Dual ISP setup with PIX/ASA
Naturally the NAT configuration format is different but it doesnt really play a big role in this setup
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml
- Jouni

Similar Messages

  • ASA 9.x support PBR?

    Hi Cisco Soldiers,
    I'd like to know if the new version for ASAs (9.x) support PBR (Policy-Based Routing).
    Regards
    Alek

    Hi,
    No, PBR is not officially supported on the ASA.
    The only way to achieve something like that is to play around with the NAT. Even though it usually works, as its not officially supported (atleast yet) theres naturally always a risk that it stops working because of some change.
    I have tried this for example in a situation where the user had 2 ISP links and wanted one DMZ network to use the other ISP for all outbound connections while the rest used the other ISP.
    - Jouni

  • Where can I find a docking station that supports the new 7th generation Nano?

    Where can I find a docking station that supports the new 7th generation Nano?

    I am not sure if there is a lightning docking station. But you can buy a lightning-to-30-pin adapter for typical docking station.

  • Okay my girlfriend just got the new 5th generation ipod, and yesterday when she plugged it into her charger, a yellow triangle appeared and said that it wasnt supported by the charger, what can we do ?

    Okay my girlfriend just got the new 5th generation ipod, and yesterday when she plugged it into her charger, a yellow triangle appeared and said that it wasnt supported by the charger, what can we do ?

    - See:       
    iPod touch: Hardware troubleshooting
    - Try another cable
    - Try another charging source
    - Inspect the dock connector for bend or missing contacts, foreign material, corroded contacts, broken, missing or cracked plastic.
    - Make an appointment at the Genus Bar of an Apple store.
    Apple Retail Store - Genius Bar

  • Upgrade from 8.2 to 8.6 for new ASA 5515X

    Hello,
    My customer has a rather complex configuration on an ASA 5510 running version 8.2
    They are migrating to new ASA 5515X models which of course only version support 8.6
    How can i convert the configuration from 8.2 to 8.6 since the new ASA's do not support the earlier versions?
    The X series seems to be a great option for new deployments but what about replacements of existing older models?
    Thanks for any ideas everyone!
    Chris

    Hello,
    I would say go to 8.4 From there you will have the same syntax.
    There will be new commands and features on 8.6... That for sure but you are going to be on the same path.
    Any other question..Sure ..Just remember to rate all of the helpul posts
    Julio

  • IPad new 3rd generation hanged, not responding.

    iPad new 3rd generation hanged, not responding. It is one day new iPad 3rd Generation.
    Today it got hanged. please help me.

    What to Do When Your iPad Won't Turn On
    http://ipad.about.com/od/iPad_Troubleshooting/ss/What-To-Do-When-Your-Ipad-Wo-No t-Turn-On.htm
    iOS: Not responding or does not turn on
    http://support.apple.com/kb/TS3281
    iPad Frozen? How to Force Quit an App, Reset or Restart Your iPad
    http://ipadacademy.com/2010/11/ipad-frozen-how-to-force-quit-an-app-reset-or-res tart-your-ipad
    iPad: Basic troubleshooting
    http://support.apple.com/kb/TS3274
     Cheers, Tom

  • Move configure from old ASA to new ASA 5515x?

    Dear All,
    Could you let me know how can i move my configuration from ASA 5510 v.8.0 to the new ASA 5515-x V9.1.1?
    i used copy running to TFTP and apply to the new ASA but it has some error like nat and Certificate.
    could i export my certificate the old ASA and import to the new ASA, that are different version. Does has any solution without donwtime ?
    Best Regards,
    Rechard

    Rechard
    I do not believe that there is a way to do the transition from old ASA running 8.0 to new ASA running 9.1 without some downtime. But is is possible to minimize the downtime. I have recently done a transition like that and it was not an easy one. As you have discovered if you attempt to copy the old config to the new ASA it will reject as invalid syntax much of the access lists and all of the nat.
    The easier way to do the transition is to have an ASA running the old code with the old config and to upgrade that ASA to 9.1. In this process the 9.1 code should read the config from startup and will do a conversion to the new syntax. I have done this going from 8.0 to 8.4 and see no reason why 9.1 would be different. You then only need to check the accuracy of the conversion. And then you can take the converted config and load it on the new ASA. In my recent conversion we did not have an extra ASA with old code, the new ASA does not support the old version, and the downtime to do this on the existing ASA was not acceptable. So I took the access lists and nat and did a manual translation from old to new. I loaded the modified config on the new ASA and did some checking. We then just switched connections from old ASA to new ASA and the downtime was minimal.
    HTH
    Rick

  • 2 ISP link failover in ASA 5505

    Hi,
    I have ASA 5505, want to configure the 2 ISP link Tata and Airtel with failover.
    I want to configure the WebVPN with failover, so that user don't need to change the public address when one link goes down.
    thanks with regards
    Ashish Kumar

    Hi michael,
    First of thanks for reply.
    Can we do it by public certificate or DNS entry e.g. both ISP Public ip address entry will be in DNS and user will hit particular DNS name. You r right that once link down so user will disconnect but when he will retry then he will connect via another link.
    Is it possible??
    Ashish

  • New 6th generation ipod - loaded my library onto the iPod  all songs are greyed out and I cannot add a playlist.

    I have purchased a new 6th generation ipod and registered it with Apple- it has loaded all my library onto the iPod but when the library is displayed all songs are greyed out and I cannot add a playlist. Can anyone help me ?

    The content that you are viewing on your Nano via iTunes is grayed out since your iPod is set up for automatic syncing with your iTunes library.  If you want to be able to manually manage your contents (which is sounds like you are trying to do), you must enable the Manually manage music option from under your iPod's Summary tab in iTunes.
    B-rock

  • I tried installing a new 4th generation shuttle to replace the one my husband lost it acts like it is syncing but it is not and nothing loaded

    I cannot get my new 4th generation shuttle to sync. It says it is but it doesnt. This is a replacement for one that is lost

    I cannot get my new 4th generation shuttle to sync. It says it is but it doesnt. This is a replacement for one that is lost

  • Does the new airport extreme support backing up via time machine to an external hard drive pluged into the usb port

    Does the new airport extreme support backing up via time machine to an external hard drive pluged into the usb port

    Yes, but you might want to note that the port on the AirPort Extreme is only USB 2.0, and that it runs at about half the speed of the USB 2.0 port on a computer, so things are going to be quite SLOW as far as backups are concerned, or anything else for that matter.

  • Hi support please help me to sync my ipod and iphone 5 . Since i have installed new itunes version 12 , i am not able to sync to transfer data to my devices through itunes.  I think there is some issue with tunes new version .kindly support ASAP.  Ra

    Hi support please help me to sync my ipod and iphone 5 . Since i have installed new itunes version 12 , i am not able to sync to transfer data to my devices through itunes.
    I think there is some issue with tunes new version .kindly support ASAP.
    Rachna khanna
    [email protected]

    you might need to buy a new cable from the apple store.

  • Producers this is a call that I make in the name of all users apple, you could add the LED flash to the camera of the new fifth-generation ipad please?

    producers this is a call that I make in the name of all users apple, you could add the LED flash to the camera of the new fifth-generation ipad please?

    This is a user to user forum. you are not addressing Apple. You can give Apple feedback here: http://www.apple.com/feedback/
    BTW: You do not speak for "all users apple". I for one have a LONG list of feature I would rather see than a flash for the iPad.

  • Does the iPod Classic 7th generation support movies in the HD format?

    Does the iPod Classic 7th generation support movies in the HD format as well as SD or just SD?

    No, the max resolution for video playback is generally 640x480, as stated in the specs
    http://www.apple.com/ipodclassic/specs.html
    The screen is actually half of that resolution, at 320x240.  HD at 720p is 1280x720.  HD at 1080p is 1920x1080

  • Intel Iris Pro GPU in new Macbook Pros supported by the Mercury Playback Engine?

    Is the Intel Iris Pro GPU in the new Macbook Pros supported by the Mercury Playback Engine?

    Hi,
    I've been wondering the same thing. I watched this video:
    http://www.youtube.com/watch?v=ATKDuQOQw9k
    if you jump to 07:50 the dude clearly shows that it IS supported in PPRo CC (which I have), but when I go to the project settings on my new MBP 15" with identical specs, the area where I can select gpu support is greyed out with no options to change from software only. Did the expert guy in the video accidentally show the settings from his old NVIDIA MBP? Very confusing!! Also, there's a lot of publicity around the Intel Iris Pro's great ability to render Open CL with Adobe PPRo. And even a video about it here:
    http://software.intel.com/en-us/videos/accelerating-video-production-with-opencl-and-intel -iris-graphics
    Is this only for PC?? If so I imagine Adobe can get this going on Mac pretty damn fast, no?
    Please advise Adobe folk!
    Thanks!

Maybe you are looking for