We recently put in a secondary internet connection across the state.  I have the primary connection coming into our main office. Both connections come in to ASA's that are set up in a failover pair.     Topology Between Connections   Primary ISP > 4500x > ASA Via VRF > Back to 4500x > | Layer 2 ISP link to second site  | > 2960x > Secondary ASA > Secondary ISP   Secondary ISP uses a different set of external IP addresses. Failover is connected via port 4 on each ASA across the network on VLAN 2. The ASAs see each other and are passing configurations between each other.  Here is what I am missing - Primary ISP comes in on g0/0 on primary ASA.  Secondary ISP comes in on g0/5 on the secondary ASA. I have an SLA and tracking on the primary static route, but when the primary ISP link goes down, I cannot get traffic to flow to the secondary ISP.  My thought process was when the main link on the primary ASA goes down, it would go into failover, making the standby active. Because the backup ISP is the only link that is up on that ASA, it would take over, but that is obviously not the case.   I can post configs if necessary, but I am really just looking for the theory behind what I am missing! As always thank you to everyone out there! ... View more

I am trying to set up a 2nd VRF on a 4507.  When I go to do IP VRF<name> I get the error % Use 'vrf definition <name>' command.  I went into vrf definition <name> and set up a RD, but then I am still unable to use the ip vrf command. I also cannot find any info on the vrf definition command. ... View more