Cisco ASA Routing Question
Posted on 2011-03-22
We have a network with 9 locations that are in a mpls network with route distribution via eigrp.
Each site also has a second internet connection that is routed with an ASA 5510.
The default gateway of each site is a layer 3 switch with EIGRP and a static 0.0.0.0 route to the ASA. We've configured site to site vpn between the locations as a backup to MPLS failure. If a link fails the route drops from EIGRP and the gateway then routes that network to the ASA which brings the tunnel up.
So here's the issue, I have static routes on the inside interface of the ASA that route each subnet back to the interior gateway so the ASA's can be managed over the MPLS. When an MPLS link goes down the static routes for the affected network have to be removed from all ASA's before the tunnels will route correctly.
What I'm hoping is that there is some way I can get the ASA to give the static route a lower metric than the VPN route, or dynamically build the route based on remote availability.
Thanks in advance!