Solved

Global command deprecated on IOS 8.4.5

Posted on 2015-02-16
4
86 Views
Last Modified: 2015-06-22
We used to use the global command to enforce sla monitor for backup internet. Now when we enter:

#global (outside) 1 interface

We get the response that this has been deprecated in IOS 8.4.

What has replaced the global command?

Thanks
0
Comment
Question by:d4nnyo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 24

Expert Comment

by:VB ITS
ID: 40613518
This article is your friend: http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/upgrading/migrating.html

A similar question was also asked (and answered) a while back. See Kvistofta's accepted solution in this EE question as he couldn't have put it any better: http://www.experts-exchange.com/Security/Software_Firewalls/Cisco_PIX_Firewall/Q_26616094.html
0
 
LVL 5

Expert Comment

by:Joey Yung
ID: 40615628
Recommend this link to explained the NAT code difference between ASA 8.2 and 8.4 later:

http://www.packetu.com/2012/01/09/typical-natpat-configuration-comparison-for-asa-8-4/ 

The beginning part is what you are asking for~
0
 
LVL 1

Author Comment

by:d4nnyo
ID: 40697084
I appreciate the comments. However I'm not a NAT / PAT expert. What I really need are actual commands that can be used under 8.4 to install and enable a backup Internet connection.

I'm familiar with the setup using sla monitor, 1 track 1 on the primary interface, etc. Can anyone tell me the commands I need to replace the global command to enable a backup internet link?

Thanks
0
 
LVL 5

Accepted Solution

by:
Joey Yung earned 500 total points
ID: 40697589
FYR:

route ISP1 0.0.0.0 0.0.0.0 192.168.1.1 1 track 1
route ISP2 0.0.0.0 0.0.0.0 192.168.2.1 254
!
sla monitor 1
!
type echo protocol ipIcmpEcho 8.8.8.8 interface ISP1
!
num-packets 4
!
timeout 3000
!
frequency 5
!
sla monitor schedule 1 life forever start-time now
!
track 1 rtr 1 reachability
!
nat (LAN,ISP1) after-auto source dynamic any interface
nat (LAN,ISP2) after-auto source dynamic any interface
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Optimal Xbox 360 connectivity requires "OPEN NAT". If you use Juniper Netscreen or SSG firewall products in a home setting, the following steps will allow you get rid of the dreaded warning screen below and achieve the best online gaming environment…
A 2007 NCSA Cyber Security survey revealed that a mere 4% of the population has a full understanding of firewalls. As business owner, you should be part of that 4% that has a full understanding.
Come and listen to Percona CEO Peter Zaitsev discuss what’s new in Percona open source software, including Percona Server for MySQL (https://www.percona.com/software/mysql-database/percona-server) and MongoDB (https://www.percona.com/software/mongo-…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question