Monday, March 4, 2019

ASA next-hop stays alive

I'm trying to figure out if there is a way to work around an issue with our next-hop configuration. We have 2 ISPs, one fiber that is our primary and one cable as a backup.

Our previous primary ISP, if the circuit went down, it was dead, we knew it and the ASA would failover to the cable. Our current fiber ISP, did something a little weird. They actually have a 3850 on prem and our ASA plugs into. The 3850 is our gateway. The problem is that if their fiber network goes down, the on prem 3850 stays up and our ASA doesn't fail to the next-hop cable because it thinks the fiber is still up, not realizing that the network beyond that is down.

Is there any way to work around this? I can't think of anything that doesn't overly complicate an already convoluted setup.

edit: for clarity.



No comments:

Post a Comment