topic Re: ASA LOAD BALANCE in Network Security

ASA LOAD BALANCE

cfajardo1_2 — Fri, 21 Feb 2020 09:36:24 GMT

HELLO,

ANYONE KNOWS WHAT DEVICE TO USE TO DO ASA LOAD BALANCING?

THANKS

Re: ASA LOAD BALANCE

Jagdeep Gambhir — Thu, 12 Jul 2007 12:29:07 GMT

Hi,

What kind of load balancing you are looking for ? Do you want to load balance VPN traffic ?

http://www.cisco.com/en/US/docs/security/asa/asa72/asdm52/selected_procedures/asdm_lb.html

Regards,

Re: ASA LOAD BALANCE

cfajardo1_2 — Fri, 13 Jul 2007 07:45:49 GMT

no.

i have 2 physical asa5520. we are thingking of creating 2 context on each asa and configure the ff

asa1

context A - active

context B - passive

asa2

context A - passive

context B - active

thereby we will be having 2 asa's with diff ip address on the outside.

we want the traffic comming in to our web servers to be load balance bet this 2 asa's

thanks

Re: ASA LOAD BALANCE

Jagdeep Gambhir — Fri, 13 Jul 2007 20:24:31 GMT

Yes that is possible,In order to run active/active mode you have to be running

multiple context mode on your PIX.

http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/failover.html#wp1121220

Regards,

~JG

Re: ASA LOAD BALANCE

cfajardo1_2 — Sat, 14 Jul 2007 05:14:54 GMT

but do i need a firewall load balancer on the outside to achieve this?

note that i now have 2 diff ip address on both the active context. how will my single outside router know to which firewall it will throw the traffic?

thanks

Re: ASA LOAD BALANCE

gabrielbryson — Tue, 17 Jul 2007 08:38:41 GMT

Im not quiet convinced that active/active was really designed for load balancing in the way you are trying to achieve in on the ASA. To answer your question I would think you will need some form of external\internal load balancer, im my experience the ASA will not do what you trying in a nice clean manner all by itself.