topic Re: ASA 5520 use HSRP on multi context in Network Security

ASA 5520 use HSRP on multi context

iotoiotoioto — Mon, 11 Mar 2019 18:41:42 GMT

There are two ASA 5520.

Is it possible to use HSRP on multi context each other?

Re: ASA 5520 use HSRP on multi context

Jennifer Halim — Fri, 17 Sep 2010 09:53:21 GMT

ASA does not support load balance within the same context. ASA load balance multiple context as follows:

Context-A via ASA-1, Context-B via ASA-2

You can't route half traffic for Context-A via ASA-1 and the other half through ASA-2 --> this is not supported.

Re: ASA 5520 use HSRP on multi context

iotoiotoioto — Fri, 17 Sep 2010 10:52:18 GMT

Thank you for reply.

So how about Virtual IP address?

ASA-1 contextA and ASA-2 contextA can have a same Virtual IP using HSRP?

Re: ASA 5520 use HSRP on multi context

iotoiotoioto — Fri, 17 Sep 2010 11:21:16 GMT

Sorry my question is bad because of my English.

I hope Active/Standby.

For exsample, One ASA(ASA-1) has context-A,context-B, other ASA(ASA-2) has context-A,context-B.

Then, ASA-1 context-A has VIP (192.168.1.1:Active), ASA-2 context-A has VIP (192.168.1.1:Standby).

Is above possible?

Re: ASA 5520 use HSRP on multi context

Jennifer Halim — Fri, 17 Sep 2010 11:42:18 GMT

No, that is not supported.

Context-A can't be on both ASA-1 and ASA-2.

You can configure the following:

ASA-1: Context-A, Context-B, Context-C

ASA-2: Context-X, Context-Y

If ASA-2 fails for example, the Context-X and Context-Y will failover to ASA-1, and at this point, ASA-1 will have Context-A, Context-B, Context-C, Context-X and Context-Y

Hope that helps.

Re: ASA 5520 use HSRP on multi context

Diego Armando Cambronero Arias — Fri, 17 Sep 2010 16:24:09 GMT

I think that you must have the same context configured in both ASA.

ASA1 context A and context B

ASA2 contect A and context B

In ASA 1 you can Have Context A as Acitive and Context B as standby

In ASA 2 you can have COnext A as stanby and context B as Active

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml#lanbas

Im not sure about your answer Halijenn

Re: ASA 5520 use HSRP on multi context

Diego Armando Cambronero Arias — Fri, 17 Sep 2010 16:25:41 GMT

Check this link

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml#lanbas

If you are going to use multiple context you go ahead and user active active failover. It's simple.

Re: ASA 5520 use HSRP on multi context

Diego Armando Cambronero Arias — Fri, 17 Sep 2010 16:29:09 GMT

Failover is possible but not using HSRP.

Re: ASA 5520 use HSRP on multi context

iotoiotoioto — Wed, 22 Sep 2010 02:30:36 GMT

Thank you, Halijenn, diegocambronero.

You are right, I should use Failover, diegocambronero.

I'll do that.thanks.

And I'm interested in Halijenn say things.

I dont understand it very well.

It's impossible to configure HSRP on multi context, right?

> Context-A can't be on both ASA-1 and ASA-2.

I dont care about I have same context on two ASA.

Just I'd like to know to use HSRP on multi context.

So, did you answer after you already know that?

If I misunderstand, point out me.

Thanks Halijenn.

Re: ASA 5520 use HSRP on multi context

Jennifer Halim — Wed, 22 Sep 2010 02:53:47 GMT

No, you are right... You can not configure virtual IP or HSRP for ASA in multi context mode.