Tracking the outside interface of the ASA

Unanswered Question
Aug 13th, 2010

Is there a way I could track the "outside" interface (public ip) of the ASA from my core 6509? I know the ASA won't allow Ping to remote interface from inside network. TIA

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Nagaraja Thanthry Fri, 08/13/2010 - 11:55


Are you trying to track the ISP connectivity? If that is the goal, then you

can track the ISP gateway rather than the outside interface IP. You are

correct in that the firewall will not allow you to ping the outside

interface IP from inside. Typically, you configure tracking for default


Hope this helps.



nguyenvinnie Mon, 08/16/2010 - 20:25

I'm trying to load balacing and failover of the Internet traffic from the 2 locations, see below.

Bldg A   6509------>ASA1------->ISP

Bldg B  6509------->ASA2------->ISP

Traffic destin to the Internet will be load balancing between the buildings, traffic from users in bldg A 1st packer will hit ASA1, 2nd packet will hit ASA2. If  one of the ISP down traffic will be sending to the other only. Below is the conf on both 6509's is the inside interface of the ASA2 and is inside interface of the ASA2. ICMP is the technic used for tracking the interfaces. I'd like to find a way of tracking the ISP not the ASA.

ip route track 124
ip route track 123

ip route permanent

ip route permanent

ip sla 124


ip sla schedule 124 life forever start-time now

ip sla 123


ip sla schedule 124 life forever start-time now


This Discussion