cisco ASA - sla/track stays UP even if ping fails

Cisco ASA 5505, 8.2
Dual ISP

I have an sla monitor configured on the backup ISP interface, configured to ping the first pingable IP in a traceroute from that interface.  (Note: I don't use the default gateway on this interface because it is also inside the building and is therefore does not indicate if the ISP is down - I can ping the cable modem even if the cable is down)

If I configure a /32 route to my sla test using the 2nd ISP link gateway, I can ping the IP using the ISP#2 interface.  If I remove the /32 route, the ISP#2 interface *cannot* ping the IP.

The sla monitor never fails and the track always shows as UP - even if I can't ping the IP.

sla monitor 2
type echo protocol ipicmp 1.2.3.4 interface isp2
num-packets 3
timeout 3000
frequency 10
sla monitor schedule 2 lifetime forever start now

track 2 rtr 2 reachability

route isp1 0.0.0.0 0.0.0.0 <isp1-gateway> 1 track 1
route isp2 0.0.0.0 0.0.0.0 <isp2-gateway> 2 track 2
route isp2 1.2.3.4 255.255.255.255 <isp2-gateway>


With the /32 route to 1.2.3.4 in place:
ping isp2 1.2.3.4  <-- WORKS
ping isp1 1.2.3.4 <-- FAILS

remove /32 route to 1.2.3.4:
ping isp2 1.2.3.4 <-- FAILS
ping isp1 1.2.3.4 <-- WORKS
snowdog_2112Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

snowdog_2112Author Commented:
Following up...

In the case where the /32 route is *removed*, isp2 CANNOT ping 1.2.3.4, but the sla monitor/track *which uses isp2* shows as OK and UP.

How can the sla be OK when a ping fails?
0
AkinsdNetwork AdministratorCommented:
Run this commands
show run sla monitor
show ip route track-table
show ip sla statistics
show track

I hope the SLA is not tracking the local interface.
Also check the repeat frequency
0
snowdog_2112Author Commented:
As mentioned in OP, the IP in the SLA is *stops pinging*, but the track still shows as UP.

Again, as mentioned in the OP, I have to add a /32 route on ISP#2 to the SLA IP address (which is beyond the ISP#2 gateway).  With the /32 route in place, I can "ping isp2 <sla-IP>".  If I remove the /32 route, "ping isp2 <sla-ip>" *FAILS*, but the track and SLA both still show as UP.

This is an ASA - there is no "ip route track-table" or "ip sla stat" command.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

AkinsdNetwork AdministratorCommented:
show sla monitor configuration
show sla monitor operational-state
0
snowdog_2112Author Commented:
I've modified the config and don't have an active instance of the route being inaccessible and not pingable, but the SLA/track still showing as Ok/Up.

I will open a new question if I see it again.  Thanks for the replies!
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
snowdog_2112Author Commented:
I can't replicate the issue at the moment, so I am unable to provide additional details.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.