topic Re: ASA-X High Availability in Network Security

ASA-X High Availability

robward — Mon, 11 Mar 2019 23:30:24 GMT

Hi, a colleague tells me the new ASA range can support Active/Active failover where you can have both devices in a pair passing traffic through the same context.

This seems quite a radical advancement so I just wanted to make sure this is correct before making any design assumptions based on this?

I can't see how this would work unless a way has been found to make state tables keep up with asymetric routing.

My previous understanding of Active/Active was that both devices could be passing traffic but through different contexts with the contexts in an Active/Standby type mode.

Thanks

Rob

Re: ASA-X High Availability

sean_evershed — Fri, 13 Jul 2012 10:20:50 GMT

Hi,

See the link below for details on the Active/Active feature of the ASA 5585X

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/design_guide_c22-624431.htm

See also the config guide for Active/Active for 8.4

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/ha_active_active.html#wp1080046

It goes onto to explain how to configure support for asymetrically routed packets using an asr-group.

Don't forget to rate posts that are helpful.

Cheers

Sean

ASA-X High Availability

Karsten Iwen — Fri, 13 Jul 2012 12:35:42 GMT

Active/Active is quite old and works with asymetric traffic as Sean has pointed out. Could it be that your colleague was talking of the upcoming clustering which will be available in ASA v9?