How to use correctly IP SLA Monitor

[Lasandro Lopez]

I'm using IP SLA to track and monitor on IP of internet.

SO, WAN IP of the router is 1.1.1.1

IP of ISP: 1.1.1.2

But i want to monitor some other internet ip, different from the one of ISP (3.3.3.3)

i've created this configuration:

i've a default route like this:

ASA01(config)#track 10 rtr 10 reachability

ASA01(config-track)#exit

ASA01(config)#ip sla 10

ASA01(config-ip-sla)#icmp-echo 3.3.3.3

ASA01(config-ip-sla-echo)#timeout 1000

ASA01(config-ip-sla-echo)#threshold 2000

ASA01(config-ip-sla-echo)#frequency 3

ASA01(config-ip-sla-echo)#exit

ASA01(config)#ip sla schedule 10 life forever start-time now

ASA01(config)#ip route 0.0.0.0 0.0.0.0 1.1.1.2 track 10

SO in this way, the tracking status remains down.

Have i to create another static router to monitorin ip 3.3.3.3, something like this:

ASA01(config)#ip route 3.3.3.3 1.1.1.2???

Regards!

[thomas.g.fan]

my understanding is the default route in your post will not be installed cause default route will only be intalled if firewall get ping reply from 3.3.3.3 but you can't ping 3.3.3.3 without a default route installed, unless you have another default route, which is normal installation when you are trying to use sla monitor. like:

ip route 0.0.0.0 0.0.0.0 a.b.c.d 250

ip route 0.0.0.0 0.0.0.0 1.1.1.2 track 10

[Lasandro Lopez]

so, on my suggestion, is it needed that i've to add another ip static route to reach the ip i want to monitor, right?

[thomas.g.fan]

sure you could do that (if you have only one internet link) and it will work while it just doesn't make sense. so the configure will looks like:

ip route 3.3.3.3 255.255.255.255 1.1.1.2

ip route 0.0.0.0 0.0.0.0 1.1.1.2 track 10