[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

Cisco ASA NAT with backup

Posted on 2014-01-30
1
Medium Priority
?
731 Views
Last Modified: 2014-02-09
I have a Cisco ASA 5510 running 9.1(4), presently i have a static nat port forwarding all inbound TCP 25 traffic to an internal email scanner's IP address. This is all working fine.

What i would like to know is whether it is possible to setup the ASA NAT config in such a way that if the email scanner failed the ASA would would then NAT all inbound TCP 25 traffic to another specified internal device.

I had in mined something like setting up sla monitoring to the email scanner from the ASA and if it failed to responed having a backup or lower priority NAT kickin.

I have found examples of using this method with outbound dynamic natting to two different ISP's but have had no luck finding any examples of a solution similar to what i would like to achieve.
0
Comment
Question by:nappyshock
1 Comment
 
LVL 28

Accepted Solution

by:
asavener earned 1500 total points
ID: 39821980
Nope.  The load balancing feature you want isn't built into ASA.  You need another load balancing device, such as an F5 or a couple of linux boxes running haproxy.

(Most folks call it load balancing, even though it's actually failover.)
0

Featured Post

Managing Security Policy in a Changing Environment

The enterprise network environment is evolving rapidly as companies extend their physical data centers to embrace cloud computing and software-defined networking. This new reality means that the challenge of managing the security policy is much more dynamic and complex.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
In this article I will be showing you how to subnet the easiest way possible for IPv4 (Internet Protocol version 4). This article does not cover IPv6. Keep in mind that subnetting requires lots of practice and time.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…

611 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question