Cisco ASA version 8.4 using 2 ISPs as failover

[cflanders]

I have a Cisco ASA 5510 and I am trying to set it up to be able to have it failover to the 2nd ISP connection if the 1st one ever went down.  I think I need a nat statement that the "backup" connection will use when the 1st connection goes down, but I am unsure what the nat statement is supposed to be.  I have added the commands that I am pretty sure that I need to add for the "backup" ISP connection.  Attached are those commands, the interfaces that are set up, and the objects that are set up in the ASA.  I would very much appreciate some help with what I am trying to accomplish.  Thank you in advance for your help.

Thanks,

Chris

[varrao]

Hi Christopher,

There is more to iot than just add a nat statement, I would suggest you to configure sla monitoring on th device, so that it does an automatic failover to backup ISP. Here is a very good doc for it:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

The nat statement that you might need to add is :

object network obj_any1

   subnet 0.0.0.0 0.0.0.0

   nat (inside,backup) dynamic interface

Hope this helps.

Thanks,

Varun

[NAGISWAREN2 · Accepted solution]

Yes... you got use IP SLA using object tracking... Please go to routing setting, on the default routing insert your ISP DNS(it could be anything but better to use ISP DNS) on tracking. Remember to do this only for your Primary Link. And then add another default routing poting to 2nd ISP without any tracking.

NAT should follow as same as Primarry link.