I have recently added a layer2 leaf to my network configuring ASA's at each of my two locations. the remote site config is working fine but I have having major issues with my ASA5505. I use a tracked route to treat data going from my primary site to the remote site but the link keeps dropping.
Please see below some of my config.
ip address 192.168.16.10 255.255.255.0
ip address 18.104.22.168 255.255.255.252
ip address 192.168.160.10 255.255.255.0
switchport access vlan 2
switchport access vlan 3
access-list L2_access_in extended permit icmp 192.168.160.0 255.255.255.0 192.168.160.0 255.255.255.0
access-list L2_access_in extended permit ip 192.168.20.0 255.255.255.0 192.168.16.0 255.255.255.0
access-list L2_access_in extended permit icmp 192.168.20.0 255.255.255.0 192.168.16.0 255.255.255.0
access-group outside_access_in in interface outside
access-group L2_access_in in interface digiwebl2
route digiwebl2 192.168.20.0 255.255.255.0 192.168.160.254 255 track 1
route inside 172.31.60.0 255.255.255.0 192.168.16.254 1
route outside 0.0.0.0 0.0.0.0 22.214.171.124 1
route outside 192.168.20.0 255.255.255.0 126.96.36.199 254
if I plug into ether0/4 I cannot ping back to the 192.168.16.10 interface which leads me to think that there is a bug somewhere on the applicance.
I have just had the device upgraded to version 7.2(5)
The interface should not go 'down' if a host is physically connected to the port. RIght after connecting the host to Eth0/4, can you ping 192.168.160.10? What is the output of 'show int vlan3' and 'show int eth0/4' at the time? Does your machine directly connected to Eth0/4 show any arp entries (on windows you can do 'arp -an' to see the arp cache).