topic ASA 5585, Active/Active and shared interface design in Network Security

ASA 5585, Active/Active and shared interface design

aacole — Mon, 11 Mar 2019 21:13:36 GMT

Hi, hopefully a quick question on the use of a pair of ASA 5585's in active/active mode with a shared outside interface.

Last time I did this was with FWSM, there was a restriction where all contexts that share an outside interface have to be in the same failover group.

Does this apply also to the ASA? My thought is that it will, but I am unable to find that in any documentation.

My 5585's will be running 8.4 code.

Andy

Re: ASA 5585, Failover, Active/Active and shared interface desig

aacole — Thu, 18 Aug 2011 10:24:21 GMT

Ha, answered my own question, the reference is in that excellent book by Jazib Frahim and Omar Santos, `Cisco ASA: All in one firewall, IPS and VPN adaptive security appliance' on page 353, knew I read it somewhere!

The contexts sharing an interface need to be in the same failover group.

Unless anyone knows different....

Message was edited by: ANDY COLE