topic ASA Route Tracking in Network Security

ASA Route Tracking

jason.edelman — Tue, 26 Mar 2019 00:41:09 GMT

Would route tracking work in the following scenario?

DSL and T1 links connected to the same ASA. The t1 will be used for a site to site VPN tunnel using dynamic routing over the tunnel. The tunnel should only be used to reach those destination networks.

The dsl should be used for all outbound/inbound Internet access.

Should the DSL fail, the T1 will be used for both VPN traffic and general inbound/outbound access.

My thinking was that since a combination of dynamic and static routes were being used and only one static (default) is being tracked, this should work fine.

Any thoughts?

Thanks.

Re: ASA Route Tracking

satish_zanjurne — Wed, 01 Oct 2008 13:47:38 GMT

1.I feel you can do without route tracking

2.As your static default route would be pointing to DSL as primary route, add one more default route which will point via T1 ,make it as floating static by increasing administrative distance

HTH..rate if helpful..

Re: ASA Route Tracking

jason.edelman — Wed, 01 Oct 2008 13:50:14 GMT

That wouldn't work. The ASA would see the DSL being up if the last mile connection into the dsl modem goes bad. ASA would never switch over to use the T1.