Static Avenue Tracking
Software Version 8.0 introduces addition different affection alleged Changeless Avenue Tracking. This affection supports the
capability to clue the cachet of the next-hop IP abode in the changeless route. Prior to this feature, there was no
inherent apparatus to actuate whether the avenue was up or down, and routes abide in the acquisition table
even if the next-hop aperture becomes unavailable. The alone barring was that if the associated interface on
the firewall went down, the routes were removed from the acquisition table.
The changeless avenue tracking affection provides the adequacy to install advancement routes dynamically back the primary
route fails.
This affection is additionally advantageous to ascertain assorted absence routes. An archetype is defining a primary absence avenue to an
ISP aperture and a advancement absence avenue to a accessory ISP in case the primary ISP becomes unavailable. Static
route tracking can additionally be enabled for changeless or absence routes acquired through Dynamic Host Configuration
Protocol (DHCP) or Point-to-Point Protocol over Ethernet (PPPoE).
This affection works by advertence a changeless avenue with a predefined ecology target. The Security Appliance
monitors the ambition by application Internet Control Bulletin Protocol (ICMP) answer appeal packets. In response, if an
ICMP echo-reply bulletin is not accustomed aural a defined period, the article is advised down, and the
associated changeless avenue is removed from the acquisition table. The advancement avenue is installed dynamically and acclimated in
place of the removed route.
The Security Appliance can be configured to use one of the afterward altar as the ecology target:
ISP aperture address
Next-hop aperture address
Specific server on the ambition network, such as a AAA server or the web server
Any assiduous arrangement article on the destination network
Note
For added capacity on changeless avenue tracking, accredit to the afterward Cisco affidavit URL:
http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/ip.html#wp1090243.