Hi Balaji, Did you manage to find your notes? Regards, mk ... View more

linux node has ssh access to asa on mgmt interface.. regards, mk ... View more

This is what I'm testing in GNS3, confirmed SSH access from control node to ASA & can ping via hostname. Please let me know if you can spot anything.   root@Network Automation-1:~# cat ansible.cfg [defaults] hostfile = ./hosts host_key_checking = false timeout = 5 root@Network Automation-1:~# cat hosts [gns3-asa] ASA root@Network Automation-1:~# cat asa3.yml --- - name: testing asa playbook hosts: ASA gather_facts: false connection: local tasks: - name: create network object asa_config: lines: - conf t - network-object host 10.80.30.18 - network-object host 10.80.30.19 parents: ['object-group network SERVERS'] register: print_output - debug: var=print_output.stdout_lines   All the formatted messed up when I pasted that in, anyway I prompt for userame & password when I run the playbook but it doesn't seem to work. Regards mk ... View more

Thank you Balanji, I have seen that before and I think its a little complex for a beginner. I will post more details shortly. Regards ... View more

Thank you again Mark. So, do you also have to configure HSRP for this to work? Regards, mk ... View more

Hi, If I understand your requirements correctly, you need to configure FHRP on the routers. Either HSRP or GLBP, easier to LB on the latter. Regards, mk ... View more

Does the peer link have to be 10Gig, would any of the switch ports work with Cat7 cable? Is the heartbeat link via 1Gig ports? Do you need Enterprise license to have the VRF feature? Thanks ... View more

Thank you, I may be back with some follow up questions :) ... View more

this might be helpful: https://community.cisco.com/t5/networking-documents/how-to-configure-pbr/ta-p/3122774 regards, mk ... View more

any other traffic would get dropped unless you added another permit statement to the route map, like below route-map secureweb permit 20 if you want the routing table to be checked for any static routes before policy-routing is applied, you can use set ip default next-hop 10.10.1.2 regards, mk     ... View more

you can use either IP SLA with syslogs to monitor if the remote peer is up or use a NMS, like PRTG or Soalrwinds. regards, mk ... View more

test with a minimal interface config also try speed auto, duplex auto could connect a test laptop to one of those same ports & check if it stays connected regards, mk ... View more