Order of Config for multiple contexts

GRANT3779 — Tue, 12 Mar 2019 08:08:31 GMT

I'm looking to configure a pair of ASAs running two contexts in an active/active failover scenario.

Is there a "best practise" in the order of configuration sections for doing this?

Would I be correct is assuming the following -

first of all create the contexts

apply the actual configs to the contexts

configure failover groups

configure the failover links

Any pointers / tips from those who have configured these in past.

Thanks

Hi

Francesco Molino — Wed, 17 Aug 2016 14:24:26 GMT

Yes you're right,

1. First create contexts and assign right interfaces.

2. Configure each context (You can apply your config file but I think you will need to modify some parts like interfaces naming, some configs should be applied on the admin context and not under your private context,...)

3. Configure your failover (groups + links). Here a doc if you need help: http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/ha_active_active.html

What we usually do (again it could change based on your design) is:

- Context A is primary on ASA 1 and secondary on ASA 2

- Context B is the opposite. Context B is primary on ASA 2 and secondary on ASA 1

Thanks

PS: Please don't forget to rate and mark as correct answer if this answered your questions.

topic Order of Config for multiple contexts in Network Security

Order of Config for multiple contexts

Hi