Cluster ASA configuration without the failover cable

blackswans — Mon, 11 Mar 2019 17:39:20 GMT

1.How can I make two firewalls cluster without the failover cable. I need to do failover from the inside. Is there any example configuration?

2.Which ports does the ipsec site-to-site vpn configuration use between two asa firewalls?

Regards....

Re: Cluster ASA configuration without the failover cable

Federico Coto Fajardo — Thu, 29 Apr 2010 18:04:47 GMT

Hi,

On the ASA there's no need for a failover cable anymore (like PIXes)

You should use a dedicated Ethernet interface for failover communication between both ASAs.

Optionally, if you enable stateful failover, can use another or the same interface.

It is recommended to be the highest-speed interface on the device.

Take a look:

Normally, an IPsec L2L tunnel will use both E0 (outside) interfaces on the ASA.

Federico.