backup static route on asa5505

[Roberto Kippins]

Hi i created two static route entries in my asa5505 like this

route inside 192.168.0.0 255.255.255.0 192.168.11.22 1

route inside 192.168.0.0 255.255.255.0 192.168.11.40 20

the last route had a higher metric i was hoping that the asa would only use it if the other route goes down but it didnt work when i tested it and when i checked the asa config it only added the first route even though i entered both so my question is is there any way i can achieve this

[Jon Marshall]

Roberto

There are a couple of things here -

1) the route with the higher AD will not show in the routing table until the first route is removed so that is why you don't see it.

2) the ASA does not automatically check whether the next hop is available or not. You probably need to track the route so if it goes down then the route is removed from the routing table and the other one installed.

The ASA configuration guide for your code will have examples of route tracking.

Jon

[Chekol Retta]

Roberto

I hope this works for you

sla monitor 1
type echo protocol ipIcmpEcho 192.168.11.22 interface inside
timeout 1000
threshold 1000
frequency 30
sla monitor schedule 1 life forever start-time now
track 1 rtr 1 reachability

route inside 192.168.0.0 255.255.255.0 192.168.11.22 1 track 1

route inside 192.168.0.0 255.255.255.0 192.168.11.40 20

[Marius Gunnerud]

As Chekol has posted, you would need to configure tracking for the primary route.  This will keep the route in the routing table until 192.168.11.22 is no longer available.  When this IP is not available (pingable) the route will be removed from the routing table and the second route will be installed.  Even when the secondary route is installed in the routing table, tracking continues to see if the primary next hop is available.  Once it is available again the primary route will be reinstalled in the routing table.

--
Please remember to rate and select a correct answer

[Roberto Kippins]

thanks guys ill try the config on monday and let you know the results