Home / server / Questions / 335779
Accepted
Andy Joiner
Asked: 2011-11-30 05:24:20 +0800 CST

Cisco ASA force failover from command line

  • 772

I have 2 independent traffic routes to my servers. They are serviced by a failover Cisco ASA5505 pair. However, should my gigabit switch on the main route fail (or main internet feed), the ASA will not detect this and failover to the standby route.

To get around this, I can detect failure of the active route from a server, easy enough.

Tricky bit: Can I run a console command/batch file to initiate this failover?

|===============|         |===============|
|   Internet    |         |   Internet    |  (No admin access, possibly not Cisco)
|    Route A    |         |    Route B    |
|===============|         |===============|
        |                         |
        |                         |
|===============|  heart  |===============|
|    ASA5505    |---------|    ASA5505    |
|===============|  beat   |===============|
        |                         |
        |                         |
|===============|         |===============|
|    Switch     |         |    Switch     |  (Not Cisco)
|===============|         |===============|
        |                         |
        |                         |
|=========================================|
|                  Server                 |
|=========================================|
cisco-asa failover

1 Answers

  1. Best Answer

    You could do this if you have a script with ssh capability. But much better are the ASA "Track" and "Ip SLA" options. look into those to track the route from the asa and add a SLA to that to switch over the network route.

    • 6