R1 Goes down

[agha talha]

Scenario:

If R1 goes down, How can we forward traffic up stream from ASA-1 which is PRIMARY and mode is ACTIVE.

[Marius Gunnerud]

If  R1 goes down, as in fails completely, and R1 is directly connected to the ASA-1 firewall, traffic will automatically failover to R2 since ASA-1 will also failover when detecting the failed interface (assuming default settings for failover have not been changed).

The issue you will run into is if R1 does not fail but the links to ISP does fail.  In this case you would need to either track the ISP using IP SLA and call that in the HSRP configuration, or configure dynamic routing between R1 and R2 so if ISP fails on R1 it will send traffic to R2.  Then when ISP on R1 is restored, traffic will automatically be restored back to normal (handled by dynamic routing).

[agha talha]

Thanks, 
could you please tell me how can I call in IP SLA in HSRP?
and also can you share the link where we can confirm the ASA will also failover when the R1 link goes down?

[Marius Gunnerud]

could you please tell me how can I call in IP SLA in HSRP?

ip sla monitor 10
type echo protocol ipIcmpEcho 8.8.8.8
ip sla monitor schedule 1 life forever start-time now

track 5 rtr 10 reachability

interface Gig0/1
standby 1 track 5 decrement 20

and also can you share the link where we can confirm the ASA will also failover when the R1 link goes down?

Bear in mind the link in question is the link between R1 and the ASA and it needs to be directly connected to the ASA in which case HSRP is not needed.  If you place a switch between the ASAs and R1 and R2 ASAs will not failover if R1 LAN link fails and will still go to HSRP vIP.

You can refer to THIS link for failover conditions on the ASA.

[MHM Cisco World]

You need SW connect Outside of both ASA HA' if there is then 

You already config HSRP between edge router'

In ASA config defualt route toward HSRP VIP of both edge router

Here if R1 failed the R2 will be active and always traffic from ASA HA send to active edge router 

MHM