ASA with DUAL ISP Failover.

As per part of My CCNP Security – this lab created to simple ASA Lab with Dual ISP.

Router Acting as Google Server

Simple below topology.

Just used some static route on ISP Router and Google Router to make it simple test.

I have attached all the simple config Google Router , ISP1, ISP2 and ASA

check the Routing on FW

check the default routing going via ISP1

check the IP SLA tracking

FW# show sla monitor operational-state 1

Number of Octets Used by this Entry: 1480
Number of operations attempted: 382
Number of operations skipped: 171
Current seconds left in Life: Forever
Operational state of entry: Active
Last time this entry was reset: Never
Connection loss occurred: FALSE
Timeout occurred: FALSE
Over thresholds occurred: FALSE
Latest RTT (milliseconds): 1
Latest operation start time: 17:47:58.501 UTC Sat Oct 15 2020
Latest operation return code: OK

Now shutdown the Link between ISP1 and FW and check the status:

FW# show sla monitor operational-state 1
Entry number: 1
Modification time: 17:01:58.504 UTC Sat Oct 14 2023
Number of Octets Used by this Entry: 1480
Number of operations attempted: 400
Number of operations skipped: 172
Current seconds left in Life: Forever
Operational state of entry: Active
Last time this entry was reset: Never
Connection loss occurred: FALSE
Timeout occurred: TRUE
Over thresholds occurred: FALSE
Latest RTT (milliseconds): NoConnection/Busy/Timeout
Latest operation start time: 17:49:28.507 UTC Sat Oct 15 2020
Latest operation return code: Timeout
RTT Values:
RTTAvg: 0 RTTMin: 0 RTTMax: 0
NumOfRTT: 0 RTTSum: 0 RTTSum2: 0

check the routes in FW – now this is moved to ISP2

Bring back to ISP1 Link and should be working normal

happy labbing….!