cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
454
Views
0
Helpful
1
Replies

ASA - ISP Failover & NAT

Terry
Level 1
Level 1

Hi, I'm running ASA version 8.4(4)1 and have configured internet failover through the use of weighted default routes and tracking. This part works fine, but when I failover to ISP2 I can't connect out. The problem seems to be NAT, because when I failover it looks like the NAT entry for ISP1 is still being used. I have a second NAT entry for ISP2, is there anyway I can get the ASA to use the second NAT entry when it fails over to ISP2?

There are lots of examples out there on how to configure this, but all for older versions of ASA.

Kind Regards

Terry

1 Reply 1

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Terry,

Actually it needs to take place,

Can you do a packet-tracer while the first ISP is down.

packet-tracer input inside tcp inside_host_ip 1026 4.2.2.2 80

Regards

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: