11-03-2022 08:55 AM
HI all,
I have a HA pair of ASA 5505's in a small setup. The ISP wants to provide the Internet link with our end being given the IP via DHCP.
I have the ISP connection connected to a switch (on Vlan3) and the ASA's are trunked off a switch pair. So the IP needs to go on the Vlan, not on the actual Interface.
But my problem is that the ASA will not allow me to setup Vlan3 as a DHCP client. I get the error "ERROR: DHCP Client cannot be enabled while in Failover or Clustering mode"
Is there any other way around this ?
11-03-2022 09:06 AM
You cannot configure failover with these types of IP addresses:
IP addresses obtained through DHCP
IP addresses obtained through PPPoE
IPv6 addresses
so can you add edge router and then config ASA behind that router?
11-03-2022 09:15 AM
what said was right, that is limitation, most of the Cluster or Actve/staby deployed in controller environment (means have own IP address space)
to mitigate you need to get any Router Like (rasberry Pi can do your work)
ISP---Rasberry Pi --Switch---ASA Cluster (just get an idea)
11-03-2022 04:42 PM
Adding an Edge router is not really an option, since the installation is in a different country, so I can only reach remotely
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide