ASA Cluster on two locations

[herve.schlecht]

I have to build a ASA Cluster, with to ASA 5520 devices, but the two ASA need to be deployed on two different locations. We have 20/25kms between the two locations. Can we build such a cluster ?

BRgds

[Eugene Khabarov]

Theoretically you can and there is no restrictions about failover interface. But I personally think it is not good idea because two locations means two completely different uplinks etc. etc. Why do you want failover cluster instead of two separated devices?

---

HTH. Please rate this post if it was helpful. If this solves your problem, please mark this post as "Correct Answer."

[hobbe]

Hi

Yes it is possible to make such a cluster. 

I have seen clusters spread out to have 600 Km between the physical ASA. (Active/Failover)

However that said. there are a few things to think about when it comes to the links between the ASA boxes.

You want minimum of 2 physically separated links between the sites, you do not want them to go in one link or in the same equipmet. This is very important for the stability of the cluster. if you do not pay attention to that, then you might end up with two asa trying to get a hold of failovers and such things.

The quality of the links between the sites are essential.

HTH

.