topic ASA 5520 cable based Failover in Network Security

ASA 5520 cable based Failover

Manesh Rajan — Mon, 11 Mar 2019 21:33:09 GMT

Hi,

What kind of cable is used for failover in asa 5520 ? Thanks guys

Regards

Manesh

ASA 5520 cable based Failover

Jennifer Halim — Mon, 03 Oct 2011 09:13:10 GMT

With ASA, you will just be using one of the LAN interface on the ASA for failover, ie: straight through cable.

Re: ASA 5520 cable based Failover

Manesh Rajan — Mon, 03 Oct 2011 09:18:05 GMT

Ha.. that’s great I thought it needs a special cable for failover. Also I have seen that cable based failover is only available in PIX. Is that true?

Thanks Jennifer..

ASA 5520 cable based Failover

varrao — Mon, 03 Oct 2011 10:38:27 GMT

Thats right you have cable based failover only in PIX, you can refer to this doc to clear out any doubts:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml

Hope that helps,

Varun

Re: ASA 5520 cable based Failover

Manesh Rajan — Mon, 03 Oct 2011 11:02:05 GMT

Hi Varun,

So this kind of configuration is not possible with ASA 5520? Please clear my doubts

ASA 5520 cable based Failover

varrao — Mon, 03 Oct 2011 11:53:34 GMT

Yes, thats right Manish, not with any model of ASA.

Thanks,

Varun

Re: ASA 5520 cable based Failover

Manesh Rajan — Mon, 03 Oct 2011 12:01:05 GMT

Hi Varun,

Can you just confirm that ASA 5520 supports cable based Active/Active Failover.

Thanks

ASA 5520 cable based Failover

varrao — Mon, 03 Oct 2011 12:17:44 GMT

HI Manesh,

Cisco ASA 5520 does not support cable based failover:

Note:

Cable-based failover is available only on the PIX 500 Series Security Appliance.

Thanks,

Varun

Re: ASA 5520 cable based Failover

Manesh Rajan — Mon, 03 Oct 2011 12:49:35 GMT

Okay .. Thanks Varun

Re: ASA 5520 cable based Failover

hobbe — Mon, 03 Oct 2011 13:00:22 GMT

The PIX do have a special failover cable. it is a special cable that are for this purpose only.

The ASA 5520 does NOT have a special failover cable, instead you (or atleast you should) set aside and use one of the Ethernet interfaces to be used as the special failover lan. = normal RJ45 cabeling rules apply. no special cable needed.

Result in both pix and ASA case will be thesame = stateful failover.

So if the question is do you use a special cable then the answer is no, there is nothing special about the cable for the asa, its a normal RJ45 cable.

in the case of pix it is a special cable.

Can you do Active/Active stateful failover with the ASA ? Yes you can.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml#act1

Good luck

ASA 5520 cable based Failover

Manesh Rajan — Mon, 03 Oct 2011 16:34:17 GMT

Cable-Based Active/Active Failover is ONLY supported on PIX 500 series security appliance. To answer your question, no, ASA 5500 series cannot do Cable-Based Active/Active Failover,

When the security appliance is configured for Active/Active stateful failover, you cannot enable IPSec or SSL VPN. These features are unavailable. VPN failover is available for Active/Standby failover configurations only.

ASA 5520 cable based Failover

Nilesh Waykar — Tue, 04 Oct 2011 05:47:31 GMT

you can use RJ-45 straight through cable and make a stateful failover