Solved

Global command deprecated on IOS 8.4.5

Posted on 2015-02-16
4
79 Views
Last Modified: 2015-06-22
We used to use the global command to enforce sla monitor for backup internet. Now when we enter:

#global (outside) 1 interface

We get the response that this has been deprecated in IOS 8.4.

What has replaced the global command?

Thanks
0
Comment
Question by:d4nnyo
  • 2
4 Comments
 
LVL 24

Expert Comment

by:VB ITS
ID: 40613518
This article is your friend: http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/upgrading/migrating.html

A similar question was also asked (and answered) a while back. See Kvistofta's accepted solution in this EE question as he couldn't have put it any better: http://www.experts-exchange.com/Security/Software_Firewalls/Cisco_PIX_Firewall/Q_26616094.html
0
 
LVL 5

Expert Comment

by:Joey Yung
ID: 40615628
Recommend this link to explained the NAT code difference between ASA 8.2 and 8.4 later:

http://www.packetu.com/2012/01/09/typical-natpat-configuration-comparison-for-asa-8-4/ 

The beginning part is what you are asking for~
0
 
LVL 1

Author Comment

by:d4nnyo
ID: 40697084
I appreciate the comments. However I'm not a NAT / PAT expert. What I really need are actual commands that can be used under 8.4 to install and enable a backup Internet connection.

I'm familiar with the setup using sla monitor, 1 track 1 on the primary interface, etc. Can anyone tell me the commands I need to replace the global command to enable a backup internet link?

Thanks
0
 
LVL 5

Accepted Solution

by:
Joey Yung earned 500 total points
ID: 40697589
FYR:

route ISP1 0.0.0.0 0.0.0.0 192.168.1.1 1 track 1
route ISP2 0.0.0.0 0.0.0.0 192.168.2.1 254
!
sla monitor 1
!
type echo protocol ipIcmpEcho 8.8.8.8 interface ISP1
!
num-packets 4
!
timeout 3000
!
frequency 5
!
sla monitor schedule 1 life forever start-time now
!
track 1 rtr 1 reachability
!
nat (LAN,ISP1) after-auto source dynamic any interface
nat (LAN,ISP2) after-auto source dynamic any interface
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Optimal Xbox 360 connectivity requires "OPEN NAT". If you use Juniper Netscreen or SSG firewall products in a home setting, the following steps will allow you get rid of the dreaded warning screen below and achieve the best online gaming environment…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question