Solved

Cisco ASA NAT with backup

Posted on 2014-01-30
1
705 Views
Last Modified: 2014-02-09
I have a Cisco ASA 5510 running 9.1(4), presently i have a static nat port forwarding all inbound TCP 25 traffic to an internal email scanner's IP address. This is all working fine.

What i would like to know is whether it is possible to setup the ASA NAT config in such a way that if the email scanner failed the ASA would would then NAT all inbound TCP 25 traffic to another specified internal device.

I had in mined something like setting up sla monitoring to the email scanner from the ASA and if it failed to responed having a backup or lower priority NAT kickin.

I have found examples of using this method with outbound dynamic natting to two different ISP's but have had no luck finding any examples of a solution similar to what i would like to achieve.
0
Comment
Question by:nappyshock
1 Comment
 
LVL 28

Accepted Solution

by:
asavener earned 500 total points
ID: 39821980
Nope.  The load balancing feature you want isn't built into ASA.  You need another load balancing device, such as an F5 or a couple of linux boxes running haproxy.

(Most folks call it load balancing, even though it's actually failover.)
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

26 Experts available now in Live!

Get 1:1 Help Now