04-14-2016 12:52 PM - edited 03-12-2019 12:37 AM
We plan to only have 2 members in our AnyConnect VPN cluster (total 50 users) on two Cisco 5516-X firewalls.
Our external and internal switches are not setup to support jumbo frames (we CANNOT reboot these switches to enable the jumbo frame feature) - Since we will only have 2 members in our cluster our plan is to connect the CCL directly between the 2 ASAs.
Is there any issue with this decision?
Thanks
Frank
Solved! Go to Solution.
04-14-2016 01:16 PM
There should not be an issue connecting the CCL link directly to the other ASA, this just needs communication between the ASAs so the Master can update the Slave regarding established connections, etc.
The only issue here would be scalability, but if you are 100% sure that you will not need to add more ASAs to the cluster.
--
Please remember to select a correct answer and rate helpful posts
04-14-2016 01:16 PM
There should not be an issue connecting the CCL link directly to the other ASA, this just needs communication between the ASAs so the Master can update the Slave regarding established connections, etc.
The only issue here would be scalability, but if you are 100% sure that you will not need to add more ASAs to the cluster.
--
Please remember to select a correct answer and rate helpful posts
04-14-2016 01:19 PM
99.99% sure, at lease for the next couple of years!
Thank you
Frank
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide