failover

[yayasolenet]

Could anybody tell me if the following senario will work?

2 ASA 5505 work as Active/Standby

Primary Unit has PPPoE WAN Link, Secondary Unit has Ethernet WAN Link.

The purpose is if PPPoE is down, the Second unit will take over and pass the traffic.

My question is

1. if PPPoE is down, the dialer interface is normally spoofing up. Which means it wont trigger the failover, isn't it?

2. when it failover, the public IP will be changed, it doesn't match the active/standby requirement, does it?

3. should we use sla failover instead of Active/Stanby failover?

4. if use sla failover, only 1 unit is required, isnt it?

Thanks in advance.

[andamani · Accepted solution]

Hi,

I guess there is some confusion between the  failover and SLA monitoring.

Failover will come into  picture for redundant ASA device. it is mostly for cases when the  primary ASA is down and service needs to be restored. it is when the  device is down.

SLA monitoring is for the cases when  the ISP is down.

For SLA monitoring only 1 device and 2 ISP  connections are required.

The following llink describes  the Active/stand by failover:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml

The  following link describes the Sla monitoring:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

Hope  this helps.

Regards,

Anisha

P.S.:  please mark this post as answered if you feel your query is answered.  Do rate helpful posts.