How to setup auto failover on ASA5505

[Nathan Hardman]

Hi All,

Thank you all in advnace for any assistance you give.

I have a client who has an ASA5505 with a leased line (IP address configured) & FTTC using PPPOE to authenticate.

The leased line is the primary & FTTC is the backup, is there a way to get this to auto failover in the event of the leased line going down.

Do you require any other details?

ASA version 9.2.4

Thanks

Nathan

[Marvin Rhoads]

You can do this by following a TAC document which explains the setup for just such use cases. Please see the following:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118962-configure-asa-00.html

Basically, your primary ISP route is favored as long as you can reach an upstream address via that path. Once it is no longer reachable, a secondary route via the FTTC connection will be favored.

[Nathan Hardman]

Hi Marvin,

Thank you for your responce

Would the above be possible as the defalt route is learned from the ISP & I connect to that interface by Username & Password rather than a static IP.

Thanks

Nath