topic Re: dual asa failover on dual cores using routed interfaces inst in Network Security

dual asa failover on dual cores using routed interfaces instead of HSRP

tsrader — Mon, 11 Mar 2019 16:45:22 GMT

using dual core 6509s, can failover be configured on both asa's when using routed interfaces on the core switches instead of using HSRP and L3 vlan?

is there a config / white paper on how to configure this?

Re: dual asa failover on dual cores using routed interfaces inst

Jon Marshall — Thu, 03 Dec 2009 18:40:56 GMT

tsrader wrote:

using dual core 6509s, can failover be configured on both asa's when using routed interfaces on the core switches instead of using HSRP and L3 vlan?

is there a config / white paper on how to configure this?

Probably need a bit more info to understand exactly how you want to set it up but the key point to rememeber is that failover requires L2 adjacency between the 2 ASAs because each corresponding interface on both the active/standby firewalls are in the same subnet.

By the sounds of it you are not proposing to have L2 adjacency beween the ASA devices ?

Jon

Re: dual asa failover on dual cores using routed interfaces inst

resoares — Thu, 03 Dec 2009 18:45:15 GMT

Hi,

Take a look at the following link:

https://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

It is possible to configure ip sla on ASA or if you prefer a routing protocol like OSPF between ASA and 6500.

The link below explains how to configure IGPs on ASA:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/ip.html

Br,