IP SLA and Track on ASA 5505 - Can your tracked route be outside & backup route be inside?

[Dean Romanelli]

Hi All,

I have a site on a common LAN - 192.168.33.0/24. They have an ASA 5505 (192168.33.5) connected to fiber that they want to be primary, and an 871 router (192.168.33.4) connected to MPLS they want to be backup. They have no layer 3 device behind either 5505 or 871 that I can control the routing between the two; only layer 2 dumb switches, so what I want to do is use IP SLA on the ASA 5505 where the outside route is the tracked route and goes to the fiber, and the inside route is the back up route, and goes to the LAN side of the 871 MPLS router, like below:

sla monitor 1
type echo protocol ipIcmpEcho 8.8.8.8 interface outside
num-packets 12
timeout 1000
frequency 5
sla monitor schedule 1 life forever start-time now

route outside 0.0.0.0 0.0.0.0 165.xxx.xxx.25 1 track 100

route inside 0.0.0.0 0.0.0.0 192.168.33.4 254

track 100 rtr 1 reachability

Will this work, and can I do it without security plus license?

[Kias · Accepted solution]

Hi,

I checked on my LAB ASA 5505 (8.4 ver), I could track inside and outside interface with SLA.

I beleive it should work.

Regards,

Kias

[Dean Romanelli]

Thanks very much.