Solved

Cisco ASA NAT with backup

Posted on 2014-01-30
1
719 Views
Last Modified: 2014-02-09
I have a Cisco ASA 5510 running 9.1(4), presently i have a static nat port forwarding all inbound TCP 25 traffic to an internal email scanner's IP address. This is all working fine.

What i would like to know is whether it is possible to setup the ASA NAT config in such a way that if the email scanner failed the ASA would would then NAT all inbound TCP 25 traffic to another specified internal device.

I had in mined something like setting up sla monitoring to the email scanner from the ASA and if it failed to responed having a backup or lower priority NAT kickin.

I have found examples of using this method with outbound dynamic natting to two different ISP's but have had no luck finding any examples of a solution similar to what i would like to achieve.
0
Comment
Question by:nappyshock
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 28

Accepted Solution

by:
asavener earned 500 total points
ID: 39821980
Nope.  The load balancing feature you want isn't built into ASA.  You need another load balancing device, such as an F5 or a couple of linux boxes running haproxy.

(Most folks call it load balancing, even though it's actually failover.)
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question