Copy AnyConnect files in Secondary ASA

[johnlloyd_13]

hi,

i got a pair of asa 5545-X in multiple mode and in active/standby pair.

i'll create a context to be used for anyconnect remote access.

i would like to ask if i need to create a "shared" directory and copy the anyconnect file images to this directory on the 'secondary' asa fw?

changeto system

class VPN
limit-resource VPN AnyConnect 2500
limit-resource VPN Burst AnyConnect 2500

interface GigabitEthernet0/0.100
description OUTSIDE
vlan 100

interface GigabitEthernet0/1.300
description INSIDE
vlan 300

mkdir shared <<< CREATE IN SECONDARY FW?

context RA-VPN
member VPN
description FOR ANYCONNECT REMOTE ACCESS VPN
allocate-interface GigabitEthernet0/0.100
allocate-interface GigabitEthernet0/0.300
storage-url shared disk0:/shared shared

copy disk0:/anyconnect-win-4.8.03052-webdeploy-k9.pkg disk0:/shared   <<< NEED TO COPY IN SECONDARY FW?
copy disk0:/anyconnect-macos-4.8.03052-webdeploy-k9.pkg disk0:/shared
copy disk0:/anyconnect-linux64-4.8.03052-webdeploy-k9.pkg disk0:/shared

[Marvin Rhoads · Accepted solution]

Yes file operations need to be performed separately on both the Primary and Secondary unit of an HA pair. This applies for both single context and multiple context modes.

[johnlloyd_13]

thanks for the quick response marvin!

keep safe and healthy!