topic ASA ( Active and standby ) towards LAN Failover Distance in Network Security

ASA ( Active and standby ) towards LAN Failover Distance

csco10979295 — Fri, 21 Feb 2020 15:40:21 GMT

Need help towards LAN Failover .

ASA is in Floor 2 and Switches is in 3rd Floor - connected via SM fiber and converter.

Is this possible fail-over happen from the LAN.

ASA 55xx and switch is 38xx

Diagram attached .

Re: ASA ( Active and standby ) towards LAN Failover Distance

Ajay Saini — Thu, 26 Apr 2018 09:43:49 GMT

Hello,

Are you concerned that a failover might happen due to long distance between the ASA and the access switches located on some other building/floor. Well, what you have is a valid design. If one of the switches goes down, a failover can happen but not due to long distance. All you have to do is to make sure that hello packets are exchanged and there are no missed hellos.

If you check the show failover output, you can check if there are any errors.

HTH
AJ

Re: ASA ( Active and standby ) towards LAN Failover Distance

csco10979295 — Thu, 26 Apr 2018 09:57:33 GMT

Hi Ajay,

Thank you for the reply . Our Concern is whether the fail-over happen ,

even the one of the switches failure are in different floor.

Re: ASA ( Active and standby ) towards LAN Failover Distance

Florin Barhala — Thu, 26 Apr 2018 19:02:45 GMT

As mentioned if hello packets are transmitted received - you will be fine.
SM fiber can handles this, now what will be the total link capacity 1 Gbps?
Will you transport any other traffic over these fibers? Like storage traffic? VMotion?

Re: ASA ( Active and standby ) towards LAN Failover Distance

csco10979295 — Fri, 27 Apr 2018 05:52:26 GMT

Hi Florin,

we are sending the Support team workstation traffic only . so will not be an issue ...

Thanks for all your reply..