Regarding secondory route : Please Help

[abhisar patil]

This is regarding secondary static routes.

As per existing setup from core switch we have two links..

1. One goes to McAfee firewall and then ASA firewall( Core-->McAfee-->ASA )
2. Other one dirctly goes to ASA firewall( Core--> ASA)

Now , In network traffic is directed via first path means static route directs to McAfee and then to ASA.
But sometimes our McAfee goes down(Blocks the entire network) so we need to direct traffic to ASA Manually.

So I want to know is there any way to track McAfee or any secondary route. N also I read up about HSRP but I think
it will not work here?

So please guide me to solve this.

Thanks,
Abhisar.

[Latchum Naidu]

Hi,

Please have the two default routes like below.

0.0.0.0 0.0.0.0 McAfee track 1
0.0.0.0 0.0.0.0 ASA 10

Then you can configure IP SLA like below to track the McAfee interface.

ip sla 1
icmp-echo McAfee_IP source-interface interface_No
timeout 1000
threshold 2
frequency 3
ip sla schedule 1 life forever start-time now

Note: The above is just for your reference and example, please use appropriate interfaces and IP address.

Hope this helps you.

Please click on the correct answer if this answered your question.
Regards,
Naidu.

[abhisar patil]

Thank you for your reply..

I got the idea about the configuration also can you tell me what to change in ASA config as incoming traffic from ouside
network is also need to direct acording to the setup.Because as McAffe goes down I route the incoming in ASA to Core switch.

So what is the way to do this?Or we can put primary and secondary Static route on ASA?

Thanks,
Abhisar.

[Latchum Naidu · Accepted solution]

Hi,

I would suggest you to configure primary and secondary Static routes on ASA

Please click on the correct answer if this answered your question.
Regards,
Naidu.

[abhisar patil]

Thank you Latchum..

I will try it out and let you know..

Thanks,

Abhisar.