03-20-2009 03:12 AM - edited 03-11-2019 08:07 AM
I have two asa 5540 and two internet lines from two different providers. I wanna create two contextes on the ASA's and assign a vpn server (site to site) on each context for each provider. My question is do i have to enable stateful failover to use active/active with the contexts or lan failover is enough?
Solved! Go to Solution.
03-20-2009 03:39 AM
VPN is not supported in multi-context mode unless you are talking about permitting IPSEC traffic through the contexts.
enable stateful failover if you do not want any interruptions during a failover event (as connection state information gets replicated to the standby firewall ) otherwise lan failover will suffice to replicate the configuration changes.
HTH
Vikram
03-20-2009 03:26 AM
I just read that with Contexts i can have no VPN so how can i configure two vpn servers with two different ISP's should i use two outside interfaces?
03-20-2009 03:39 AM
VPN is not supported in multi-context mode unless you are talking about permitting IPSEC traffic through the contexts.
enable stateful failover if you do not want any interruptions during a failover event (as connection state information gets replicated to the standby firewall ) otherwise lan failover will suffice to replicate the configuration changes.
HTH
Vikram
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide