Cisco ASA Multi Context Failover Groups

[NeWGuy1109]

Hello,

I have 2 ASA in HA Setup with MultiContexts running. There are two failover groups defined. 

When i run show failover on the Primary Member it shows as follows:

This Host : Primary

Group 1 : Active 

Group 2 : Standby Ready

Other Host : Secondary

Group 1 : Standby Ready 

Group 2 : Active

I want to run a Active /Standby Setup where the Primary shows both Groups as Active in Primary Firewall and both groups as Standby in Secondary Firewall.. How can i achieve that ?

Thanks

[Sheraz.Salim · Accepted solution]

any reason why you want to change this behavior. these configure you have are the best cisco recommended.

here is the config to change.

ASA1

!

failover lan unit prim
failover lan LAN gig0/3
failover link STATE gig0/4
failover interface ip LAN 192.168.101.1 255.255.255.0 stan 192.168.101.2
failover interface ip STATE 192.168.102.1 255.255.255.0 sta 192.168.102.2
failover group 1
primary
pre
failover group 2
primary
pre
!

[NeWGuy1109]

Thank you ...this is very helpful..

Isnt VPN a problem in Active/Active Mode ?

[Sheraz.Salim]

Is your question is about site-to-site or anyconnect on these Active/Active ASA. also what software version you running on the Box?

[balaji.bandi]

here is more explained in detailed :

https://www.petenetlive.com/KB/Article/0001114