LAN Failover in ASA 5505

[Nandesh Singh]

I have two web server and I want to configure ASA 5505 in such a way that it forward all incoming request to ServerA. In case if ServerA is down or failed ASA 5505 automatically forward all incoming request to ServerB.

I am new to ASA 5505.

Thanks in advance.

[Walter Astori · Accepted solution]

You can do that if the web server are in two different subnet. So one web server is on a interface and the other web server is on other interface. You must configure ip sla as below :

interface Ethernet0/0.1239
 vlan 1239
 nameif OUTSIDE
 security-level 0
 ip address 94.125.239.251 255.255.255.0
!
interface Ethernet0/0.1240
 vlan 1240
 nameif OUTSIDE-BACKUP
 security-level 0
 ip address 94.138.42.43 255.255.255.248

route OUTSIDE 0.0.0.0 0.0.0.0 94.125.239.252 1 track 1
route OUTSIDE-BACKUP 0.0.0.0 0.0.0.0 94.138.42.41 254

sla monitor 123
 type echo protocol ipIcmpEcho 8.8.8.8 interface OUTSIDE
 num-packets 3
 frequency 10
sla monitor schedule 123 life forever start-time now

track 1 rtr 123 reachability

For the web server A if is down, you must check it with a script that is executing on a server in the same subnet of web server A

[Nandesh Singh]

Thanks Walter,

As I have mentioned, these server is internal servers and I need failover for incoming request.

Suppose ServerA having IP as 192.168.1.3 and ServerB having Ip as 192.168.1.4 ( or 192.168.2.4)

Sorry, if I have not understood.