We have an ACE 4710 that has two web servers in an active/passive scenario.  The issue is that if node 1 fails and node 2 takes over connections to node 2 stay active even if node 1 becomes available again.  Is there are way to ensure that node one is not placed back into service if it becomes available again. Also can someone verify how active/passive failover shoudl be configured, so I can make sure I have it set up correctly; ... View more

Currently we have a Cisco ACE 4710 doing a lookup for an image on a website to determine whether the site is available or not.  Is there any way to get the ACE to query the server (probably using SNMP) and failover if the server's processor stays above 90% for more than 5 minutes? Thanks in advance ... View more

Probe Interval: 5 Pass Detect (Seconds): 60 Fail Detect: 3 Please can someone explain the above settings that are configured for a health probe?  am I correct in thinking the probe is sent every 5 seconds, and must fail 3 times in order to failover?  Does the "Pass Detect" indicate that the server must be back online for 60 seconds before being placed back into the server farm? Also if we have a primary server and a back up server (used if primary fails), if the primary fails and the backup server becomes active, will the primary server become available again when it comes back online, or will all connections continue to go to the backup?  Is there anyway to make the old primary the new backup when it comes back online? ... View more

We have an ASA with two internet connections, one for voice and one for data. IPSLa is being used to provide failover should either link fail.  The issue is the connections for the SIP calls do not time out once that link fails.. you always have to clear the connection from teh firewall manually ... View more

We have two internet connections, one for voice and one for data, we are  using IPSLA to provide failover between the two, however if the voice  link fails we always have to run "clear xlate" to get the phones to come  back online ... View more

We have two internet connections, one for voice and one for data, we are using IPSLA to provide failover between the two, however if the voice link fails we always have to run "clear xlate" to get the phones to come back online ... View more

We have an ASA 8.4 with 2 internet connection, one primarily used for voice and the other for data.  I have set up IPSLA so that if either link fails the traffic is routed over the other link.  The problem is if voice fails, the routes change correctly but the phones do not come back up until I issue an 'clear xlate'  Is there any way to resolve this? ... View more

We are configuring an ASA 5505 version 8.4 to connect to another site via L2L IPSec VPN.  The subnet at the ASA site is 192.168.1.0 and the remote side is 192.168.100.0/24.  However the 192.168.100.0/24 side already has another VPN with a site using 192.168.1.0 so we were going to NAT out our local subnet to 192.168.25.0/24, so the interesting traffic would look like this 192.168.25.0/24 <-> 192.168.100.0/24. The VPN establishes but the traffic does not appear to be working.. My NAT statement is as follows nat (inside,outside) source static obj-192.168.1.0 obj-192.168.25.0 destination static obj-192.168.100.0 obj-192.168.100.0 Does this look right? ... View more

Hi there, We have an issue with our current ASA 5505 set up and I hope someone can help.  Here is the setup ISP Handoff -> L2 Switch -> VLAN 1 of ASA                                       -> VLAN 2 of ASA The ISP handoff is a single ethernet cable but the ISP router is acting as the gateway for 2x seperate public address spaces.  ISP cable plugs into a L2 switch.  The two VLANS of the ASA are then plugged into the same switch, one VLAN configured for public space 1 and the other for public space 2, now the issue is when the firewall ARPs for the gateways VLAN2's gateway shows up on VLAN 1 and VLAN 2 which obviously causes issues. ... View more

I am reading about LLQ on the ASA and it says you need to enable it on the interface, however to you enable this on the ingress or egress interface? for example if I have both voice and traffic on the inside of my network but want to make sure voice is given priority queuing, do I enable this on the inside or outside interface? Thanks ... View more