10-21-2012 10:38 AM - edited 03-11-2019 05:12 PM
Hi,
Is it possible to track two destination IP address via IP SLA in Cisco ASA 8.4?
Below the current setup with configuration. I would like to add one more Public IP address(8.8.8.8) to track. in case both the destination IP address is not reachable then only the traffic should go via ISP2.
Cisco ASA(192.168.1.1) ==> SW ==>(192.168.1.2) Internet GW1 ----- ISP1
(192.168.1.3)Internet GW2 ----- ISP2
route outside 4.2.2.2 255.255.255.255 192.168.1.2
route outside 8.8.8.8 255.255.255.255 192.168.1.2
route outside 0.0.0.0 0.0.0.0 192.168.1.2 track 100
route outside 0.0.0.0 0.0.0.0 192.168.1.3 250
sla monitor 10
type echo protocol ipIcmpEcho 4.2.2.2 interface outside
num-packets 5
frequency 5
sla monitor schedule 10 life forever start-time now
track 100 rtr 10 reachability
Thanks in Advance
Solved! Go to Solution.
10-21-2012 10:31 PM
Hello,
Okay, that cannot happen, SLA will work only by associating a track object to a route ( so only one track device is required)
Regards
Julio
10-22-2012 04:06 AM
Hi,
if the implementation was the same on ASA as it is on routers and switches then it would be doable with the boolean list feature.
http://www.cisco.com/en/US/docs/ios/12_2t/12_2t15/feature/guide/fthsrptk.html
I just did a quick search and it seems it is not a feature available on the ASA so as Julio stated it won't be possible.
Regards.
Alain
10-21-2012 11:57 AM
Hello,
It is possible to do this,
Configuration looks good. You do not need to have this so you can remove it to make it clear.
route outside 4.2.2.2 255.255.255.255 192.168.1.2
route outside 8.8.8.8 255.255.255.255 192.168.1.2
Regards,
Julio
10-21-2012 09:30 PM
Hi, Thanks for your reply, I want to monitor two internet address, if both address not reachable then only tracking should happen.. please advise
10-21-2012 10:31 PM
Hello,
Okay, that cannot happen, SLA will work only by associating a track object to a route ( so only one track device is required)
Regards
Julio
10-22-2012 04:06 AM
Hi,
if the implementation was the same on ASA as it is on routers and switches then it would be doable with the boolean list feature.
http://www.cisco.com/en/US/docs/ios/12_2t/12_2t15/feature/guide/fthsrptk.html
I just did a quick search and it seems it is not a feature available on the ASA so as Julio stated it won't be possible.
Regards.
Alain
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide