topic Cisco ASA + IP SLA in Network Security

Cisco ASA + IP SLA

RS19 — Mon, 03 Aug 2020 07:38:42 GMT

I have the below configuration in my ASA firewall

-------------------------------------------------------

sla monitor 1
type echo protocol ipIcmpEcho x.x.x.x interface outside
num-packets 3
timeout 1000
frequency 9

-------------------------------------------------------------
I want to change the timeout value from 1000 -> 4000 , let me know is the below steps is right or should I remove the complete commands. I don't have the UAT to test it.

sla monitor 1
type echo protocol ipIcmpEcho x.x.x.x interface outside
timeout 4000

Re: Cisco ASA + IP SLA

Marvin Rhoads — Mon, 03 Aug 2020 18:56:21 GMT

If the sla monitor operation is already scheduled then you must first remove it and then recreate with the new parameters. So first:

clear configure sla monitor

...and then:

sla monitor 1
type echo protocol ipIcmpEcho x.x.x.x interface outside
num-packets 3
timeout 4000
frequency 9

...along with recreating the scheduling command such as:

sla monitor schedule 1 life forever start-time now

Re: Cisco ASA + IP SLA

RS19 — Tue, 04 Aug 2020 00:49:13 GMT

Thanks.

Could you please explain me what the below command exactly does ?

clear configure sla monitor

Re: Cisco ASA + IP SLA

RS19 — Tue, 04 Aug 2020 00:51:29 GMT

Sorry I am not able to find the explanation of the below command

clear configure sla monitor

Re: Cisco ASA + IP SLA

RS19 — Tue, 04 Aug 2020 01:10:15 GMT

Is the below steps is right ?

Current Configuration:

sla monitor 1
type echo protocol ipIcmpEcho x.x.x.x interface outside
num-packets 3
timeout 1000
frequency 9

sla monitor schedule 1 life forever start-time now

------------------------------------------------------------

Steps:

no sla monitor schedule 1 life forever start-time now

no sla monitor 1

sla monitor 1
type echo protocol ipIcmpEcho x.x.x.x interface outside
num-packets 3
timeout 4000
frequency 9

sla monitor schedule 1 life forever start-time now

Re: Cisco ASA + IP SLA

Marvin Rhoads — Tue, 04 Aug 2020 08:06:53 GMT

That would work.

The earlier "clear..." command I provided clears both command 1 and 2 and the same time