ASA failover active/standby inside and outside configuration

Justin Pascal — Mon, 11 Mar 2019 23:42:55 GMT

Hi all,

Im following this document:

the scenario I have is the following:

Cisco VCS -inside- ASA-a -outside- Cisco VCS-E

1.1.1.1 2.2.2.1

I'm planning to configure active/standby with failover link crossover cable.

If I add a second ASA

It will be linke this:

1.1.1.2 ASA-b 2.2.2.2

| 10.10.10.2 (stateful link)

| 10.10.10.1

Cisco VCS -inside- ASA-a -outside- Cisco VCS-E

1.1.1.1 2.2.2.1

From document it only uses the outside interface.

[Question]

Do i need to specify my internal IP address to do failover as well?

From DOC:

In this example, the outside interface of the primary PIX is configured this way

hostname(config-if)#ip address 172.16.1.1 255.255.0.0 standby 172.16.1.2

Here, 172.16.1.1 is used for the primary unit outside interface IP address, and 172.16.1.2 assigns to the secondary (standby) unit outside interface.

Thanks

rleivaoc — Wed, 15 Aug 2012 21:54:24 GMT

By default, all interfaces are monitored. Which menas all enabled interfaces need an standby IP address. I hope this helps.

Rafael

topic ASA failover active/standby inside and outside configuration in Network Security