topic Re: Cisco ASA Multi Context Failover Groups in Network Security

Cisco ASA Multi Context Failover Groups

NeWGuy1109 — Thu, 12 Sep 2019 15:18:42 GMT

Hello,

I have 2 ASA in HA Setup with MultiContexts running. There are two failover groups defined.

When i run show failover on the Primary Member it shows as follows:

This Host : Primary

Group 1 : Active

Group 2 : Standby Ready

Other Host : Secondary

Group 1 : Standby Ready

Group 2 : Active

I want to run a Active /Standby Setup where the Primary shows both Groups as Active in Primary Firewall and both groups as Standby in Secondary Firewall.. How can i achieve that ?

Thanks

Re: Cisco ASA Multi Context Failover Groups

Sheraz.Salim — Thu, 12 Sep 2019 18:52:55 GMT

any reason why you want to change this behavior. these configure you have are the best cisco recommended.

here is the config to change.

ASA1

failover lan unit prim
failover lan LAN gig0/3
failover link STATE gig0/4
failover interface ip LAN 192.168.101.1 255.255.255.0 stan 192.168.101.2
failover interface ip STATE 192.168.102.1 255.255.255.0 sta 192.168.102.2
failover group 1
primary
pre
failover group 2
primary
pre
!

Re: Cisco ASA Multi Context Failover Groups

balaji.bandi — Thu, 12 Sep 2019 22:32:34 GMT

here is more explained in detailed :

https://www.petenetlive.com/KB/Article/0001114

Re: Cisco ASA Multi Context Failover Groups

NeWGuy1109 — Fri, 13 Sep 2019 08:52:21 GMT

Thank you ...this is very helpful..

Isnt VPN a problem in Active/Active Mode ?

Re: Cisco ASA Multi Context Failover Groups

Sheraz.Salim — Fri, 13 Sep 2019 09:50:57 GMT

Is your question is about site-to-site or anyconnect on these Active/Active ASA. also what software version you running on the Box?