ASA 5520 use HSRP on multi context

[iotoiotoioto]

There are two ASA 5520.

Is it possible to use HSRP on multi context each other?

[Jennifer Halim]

ASA does not support load balance within the same context. ASA load balance multiple context as follows:

Context-A via ASA-1, Context-B via ASA-2

You can't route half traffic for Context-A via ASA-1 and the other half through ASA-2 --> this is not supported.

[iotoiotoioto]

Thank you for reply.

So how about Virtual IP address?

ASA-1 contextA and ASA-2 contextA can have a same Virtual IP using HSRP?

[iotoiotoioto]

Sorry my question is bad because of my English.

I hope Active/Standby.

For exsample, One ASA(ASA-1) has context-A,context-B, other ASA(ASA-2) has context-A,context-B.

Then, ASA-1 context-A has VIP (192.168.1.1:Active), ASA-2 context-A has VIP (192.168.1.1:Standby).

Is above possible?

[Jennifer Halim]

No, that is not supported.

Context-A can't be on both ASA-1 and ASA-2.

You can configure the following:

ASA-1: Context-A, Context-B, Context-C

ASA-2: Context-X, Context-Y

If ASA-2 fails for example, the Context-X and Context-Y will failover to ASA-1, and at this point, ASA-1 will have Context-A, Context-B, Context-C, Context-X and Context-Y

Hope that helps.

[Diego Armando Cambronero Arias]

I think that you must have the same context configured in both ASA.

ASA1  context A  and context B

ASA2  contect A  and context B

In ASA 1 you can Have Context A as Acitive and Context B as standby

In ASA 2 you can have COnext A as stanby and context B as Active

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml#lanbas

Im not sure about your answer Halijenn

[iotoiotoioto]

Thank you, Halijenn, diegocambronero.

You are right, I should use Failover, diegocambronero.

I'll do that.thanks.

And I'm interested in Halijenn say things.

I dont understand it very well.

It's impossible to configure HSRP on multi context, right?

> Context-A can't be on both ASA-1 and ASA-2.

I dont care about I have same context on two ASA.

Just I'd like to know to use HSRP on multi context.

So, did you answer after you already know that?

If I misunderstand, point out me.

Thanks Halijenn.

[Jennifer Halim]

No, you are right... You can not configure virtual IP or HSRP for ASA in multi context mode.

[Diego Armando Cambronero Arias]

Check this link

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml#lanbas

If you are going to use multiple context you go ahead and user active active failover. It's simple.

[Diego Armando Cambronero Arias]

Failover is possible but not using HSRP.