ASA Failover between three ASA

[Mustafa Mubdir]

Hi,

I want to make this senario for failover like in attached picture, 

for ASA-A its connected to deffrent ISP of ASA-B, and every ASA handle deffrent network, can i put another ASA with two context as standby for actives FW's

Thanks.

[Marvin Rhoads · Accepted solution]

No - sorry that will not work.

"The two units in a failover configuration must:

...

•Be in the same context mode (single or multiple)."

Source.

[Karsten Iwen]

As Marvin stated, it won't work as in your picture.

But if you don't need any features that are not available in multiple-context-mode, then you could configure Active/Active-failover between ASA-A and ASA-B with one context for the operation of ASA-A and another Context for the operation of ASA-B.

[Marvin Rhoads]

Good suggestion, Karsten.

The only caveat that brings to mind is that remote access VPN isn't supported in multi-context mode. So if that's in use they couldn't go that route.

p.s. hope to see you at Cisco Live this year.