Solved: ASA5512-IPS with failover - how do you config IPS for config sync and failover

ccpagel · ‎01-09-2013

Hi all,

I have a pair of 5512-X's with IPS. The ASA's are configured for failover with active/standby. Is it possible to configure the 5512-IPS is an active/standby state with configuration synchronisation? I’ve been unable to locate any configuration documentation on this.

Your advice would be appreciated.

Regards,

Chris

Karsten Iwen · ‎01-09-2013

There is no active/standby-state or replication as it is on the ASA. Both IPS-modules are configured completely independent. It's your responsibility to keep the two units in sync.

Yes, it's an improvable state and every admin in a small setup without a cetralized management is hoping for new features there.

--
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

View solution in original post

Karsten Iwen · ‎01-09-2013

There is no active/standby-state or replication as it is on the ASA. Both IPS-modules are configured completely independent. It's your responsibility to keep the two units in sync.

Yes, it's an improvable state and every admin in a small setup without a cetralized management is hoping for new features there.

--
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

ccpagel · ‎01-09-2013

Thanks for the info Karsten - this is what I suspected. Its far from ideal, lets hope Cisco address it in the future.

Regards,

Chris