Big thanks to you. Your suggestion is really help me to more understand the SLA monitor for the ASA. Thanks and Regards,Pipatpong
Date: Sun, 3 Oct 2010 10:20:51 +0530 Subject: Re: [OSL | CCIE_Security] High-Avaiability feature default route with SLA monitor for the ASA From: [email protected] To: [email protected]; [email protected]; [email protected] Hello Pipatpong, I remember we had a thread sometime back here about the SLA Monitor feature. Just thought the below excerpt could be useful to you : ex : Suppose the frequency is 10 seconds, and the num-of-packets is 3 and the timeout is 1000 ( 1 second ). The asa sends out 3 pings once every 10 seconds. I configured CPPR on R1 to only permit 1 echo-request and the 2 were dropped. But the ASA was still saying that the timeout didn't occur, but i could see the "NumofRTT" field in "show sla monitor operational-state" go down to 1 ( it was 3 originally, i.e 3 echo-replies were received) . But as soon as i dropped all icmp traffic on R1, the ASA immediately showed that the timeout had occurred. So as a summary, for the SLA to timeout , all the pings have to timeout, not just 1. Cheers,TacACK
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
