https://community.cisco.com/t5/network-security/is-there-a-way-to-see-your-asa-s-backup-default-route/m-p/2783227#M160048 <P>You can see the backup default route with "show run | in route". As you have IP Sla, you would have a backup route with a higher A.D.</P> <P>You can check with "show asp table routing"</P> Wed, 03 Feb 2016 19:40:59 GMT Syed Taukir 2016-02-03T19:40:59Z https://community.cisco.com/t5/network-security/is-there-a-way-to-see-your-asa-s-backup-default-route/m-p/2783226#M160047 <P>Hi,</P> <P>We have SLA monitoring set up to ping a Google DNS server with the IP address of 8.8.4.4. We also have a default route pointing to the next hop of our primary ISP. If that primary ISP failed then we would want traffic to fail over to the secondary ISP on our outside2 interface. This SLA Monitor was configured before my time with the company, and the primary ISP never fails, so I'm not sure if a backup default route to the secondary ISP was ever configured and added to the SLA Monitor. I really can't shut down the outside interface for our primary ISP to test, so is there any way to check the CLI or the ASDM of an ASA5510 to see if the backup DEFAULT route is configured. From my understanding, you can only ever see this backup DEFAULT route if the primary fails. I hope I'm wrong because I would love to find a way to see if that backup DEFAULT route even exists. Also, what are the best practices for an SLA Monitor? Should I point it to the next hop for our primary ISP, or is the Google DNS server it is pointed to now sufficient?&nbsp;</P> <P>Does anyone know the answer to this?</P> <P></P> <P>Rick</P> Tue, 12 Mar 2019 07:14:15 GMT https://community.cisco.com/t5/network-security/is-there-a-way-to-see-your-asa-s-backup-default-route/m-p/2783226#M160047 rweir0001 2019-03-12T07:14:15Z https://community.cisco.com/t5/network-security/is-there-a-way-to-see-your-asa-s-backup-default-route/m-p/2783227#M160048 <P>You can see the backup default route with "show run | in route". As you have IP Sla, you would have a backup route with a higher A.D.</P> <P>You can check with "show asp table routing"</P> Wed, 03 Feb 2016 19:40:59 GMT https://community.cisco.com/t5/network-security/is-there-a-way-to-see-your-asa-s-backup-default-route/m-p/2783227#M160048 Syed Taukir 2016-02-03T19:40:59Z https://community.cisco.com/t5/network-security/is-there-a-way-to-see-your-asa-s-backup-default-route/m-p/2783228#M160049 <P>Thanks, Syed. That was excatly what I was looking for.</P> Wed, 03 Feb 2016 19:52:52 GMT https://community.cisco.com/t5/network-security/is-there-a-way-to-see-your-asa-s-backup-default-route/m-p/2783228#M160049 rweir0001 2016-02-03T19:52:52Z https://community.cisco.com/t5/network-security/is-there-a-way-to-see-your-asa-s-backup-default-route/m-p/2783229#M160050 <P>As Syed mentioned, you can check the backup default route with "show run | in route".</P> <P>If you want to verify your configuration and also want to have a look at some "show" commands,</P> <P>this link can be handy:</P> <P>http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/70559-pix-dual-isp.html</P> <P></P> <P>Regards,</P> <P>Pulkit Saxena</P> Thu, 04 Feb 2016 16:10:58 GMT https://community.cisco.com/t5/network-security/is-there-a-way-to-see-your-asa-s-backup-default-route/m-p/2783229#M160050 Pulkit Saxena 2016-02-04T16:10:58Z https://community.cisco.com/t5/network-security/is-there-a-way-to-see-your-asa-s-backup-default-route/m-p/2783230#M160051 <P>Thanks!</P> Tue, 09 Feb 2016 19:58:21 GMT https://community.cisco.com/t5/network-security/is-there-a-way-to-see-your-asa-s-backup-default-route/m-p/2783230#M160051 rweir0001 2016-02-09T19:58:21Z