ASA-X High Availability

[robward]

Hi, a colleague tells me the new ASA range can support Active/Active failover where you can have both devices in a pair passing traffic through the same context.

This seems quite a radical advancement so I just wanted to make sure this is correct before making any design assumptions based on this?

I can't see how this would work unless a way has been found to make state tables keep up with asymetric routing.

My previous understanding of Active/Active was that both devices could be passing traffic but through different contexts with the contexts in an Active/Standby type mode.

Thanks

Rob

[sean_evershed]

Hi,

See the link below for details on the Active/Active feature of the ASA 5585X

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/design_guide_c22-624431.htm

See also the config guide for Active/Active for 8.4

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/ha_active_active.html#wp1080046

It goes onto to explain how to configure support for asymetrically routed packets using an asr-group.

Don't forget to rate posts that are helpful.

Cheers

Sean

[Karsten Iwen]

Active/Active is quite old and works with asymetric traffic as Sean has pointed out. Could it be that your colleague was talking of the upcoming clustering which will be available in ASA v9?