topic Configuring Static Route Tracking Using ASDM 7.1(3) ASA 9.1(2) in Network Security

Configuring Static Route Tracking Using ASDM 7.1(3) ASA 9.1(2)

jeggleston — Tue, 12 Mar 2019 02:34:58 GMT

I have recently updated my ASA5520 to 9.1(2) and I am using ASDM 7.1(3) to configure Static Route Tracking. I have done this previoussy in earlier version of ASDM without a problem. There seems to be a new field in the Tracked Options section. What is the "Target Interface"? Is it the interface I want to use as the standby route when the Monitor fails? Or is it the Interface that is doing the monitoring?

I have looked through Cisco ASA Series General Operations ASDM Configuration Guide Software Version 7.1, as well as older ASDM books and this field is never listed or described.

Configuring Static Route Tracking Using ASDM 7.1(3) ASA 9.1(2)

Jouni Forss — Fri, 06 Sep 2013 15:54:13 GMT

Hi,

I typically only use the CLI to configure the ASA.

But by the looks of it the "Target Interface" just tells us what interface to use as the target for the destination IP address that is going to be monitored.

In my case the configuration using the "Target Interface" could for example look like this in CLI format (WAN is the name of my external firewall interface)

sla monitor 1

type echo protocol ipIcmpEcho 1.1.1.1 interface WAN

- Jouni

Configuring Static Route Tracking Using ASDM 7.1(3) ASA 9.1(2)

jeggleston — Fri, 06 Sep 2013 16:10:58 GMT

Hi Jouni,

Thanks for the reply. So, I am setting up the route tracking on my "Outside" interface, I have another interface, "Hotwire" with a higher Metric, that I want to failover to when the ping fails. Should the "Hotwire" interface be the Target Interface?

- Jeff

Configuring Static Route Tracking Using ASDM 7.1(3) ASA 9.1(2)

Jouni Forss — Fri, 06 Sep 2013 16:15:20 GMT

Hi,

The target interface will be the interface through which you will be polling some destination IP address with ICMP Echos to determine if the route through that interface is still valid.

So in your case you would use "Outside"

Heres the link to the ASA Command Reference listing the above "type" command under the "sla monitor 1" configuration

http://www.cisco.com/en/US/docs/security/asa/command-reference/t2.html#wp1568359

- Jouni