topic LAN-Based Active/Standby Failover Configuration in Network Security

LAN-Based Active/Standby Failover Configuration

somnath21 — Mon, 11 Mar 2019 13:33:22 GMT

Hi,

I want to configure LAN-Based Active/Standby failover between two ASA 5520.From inside interfaces of two ASA cables are connected to access switch and then access switch to core switches.From outide interfaces ethernet cabes are connected to another access switch and access switch to a single internet Router.

1)Shall I user a cross over cable as faiolver link between two ASA?

2)What configuration I have to do in the access switches?

Please guide..

regards,

som

Re: LAN-Based Active/Standby Failover Configuration

andrew.prince — Wed, 20 Aug 2008 08:12:18 GMT

Som,

See the below links for the options and configurations:-

http://www.cisco.com/en/US/customer/products/ps6120/products_configuration_example09186a0080834058.shtml

http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml

HTH>

Re: LAN-Based Active/Standby Failover Configuration

Jon Marshall — Wed, 20 Aug 2008 08:17:00 GMT

Som

If the ASA devices are near enough then yes you can use a crossover cable if you want to although i have always used straight thru cables and connected via switches.

If you do use switches then you can either

i) use a dedicated switch for connectivity between the ASA devices

ii) Use your existing inside switches but make sure you use a dedicated vlan for the failover.

A lot depends on how much traffic there is on your access-layer switches already. What you don't want is for keepalives to go missing because of the amount of user traffic.

If you are concerned about this a crossover cable may well be the way to go. See attached link for more details:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/failover.html#wp1047269

Jon

Re: LAN-Based Active/Standby Failover Configuration

somnath21 — Wed, 20 Aug 2008 09:36:40 GMT

Hi Andrew,

I am unable to access those materials as its asking username & pass. I have tried with my netpro user id but it's not working.Can you please attach it.

Thanks,

som