Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

IPSLA Verification

We have two internet connections name "outside" and "Voice".  The internet connection named "outside" is the main internet conection and the second internet connection "voice" is only used to reach a single IP address (9.9.9.9).  I would like it so that if either internet connection fails the connections will failover to the other active internet connection.  I going to implement this using IPSLA and would appreciate it if someone could review my config and verify if this will work.

Thanks

route outside 0.0.0.0 0.0.0.0 [public_ip] 1 track 1

route voice 0.0.0.0 0.0.0.0 [public_ip] 254

sla monitor 99

type echo protocol ipIcmpEcho [public_ip] interface outside

num-packets 3

frequency 10

sla monitor schedule 123 life forever start-time now

track 1 rtr 123 reachability

route voice 9.9.9.9 255.255.255.255 [public_ip] 1 track 1

route outside 9.9.9.9 255.255.255.255 [public_ip] 254

sla monitor 100

type echo protocol ipIcmpEcho [public_ip] interface voice

num-packets 3

frequency 10

sla monitor schedule 100 life forever start-time now

track 1 rtr 100 reachability

1 REPLY

IPSLA Verification

Hello,

I do not see why this will setup will not work, if both interfaces can get to 9.9.9.9 everything should work.

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
244
Views
0
Helpful
1
Replies
CreatePlease to create content