cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1859
Views
0
Helpful
1
Replies

How to use VIP with ASA5506 with firepower

JonesBrandao
Level 1
Level 1

I wanna to do two firewalls in cluster (Active/Standby), like HSRP. 

I haven't found this configuration in ASDM, follow the picture attached.

 

 

1 Accepted Solution

Accepted Solutions

@JonesBrandao 

You can configure the ASA in Active/Standby HA pair. This does not use a VIP like HSRP, rather you define an active and standby IP address. Upon failover the active IP address (and MAC address) moves over to the other newly active ASA.

 

Here is an example using ASDM to configure.

https://www.youtube.com/watch?v=Tj9INEKiQHM

Configuration guide.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/asdm77/general/asdm-77-general-config/ha-failover.html#ID-2107-000000a8

 

 

View solution in original post

1 Reply 1

@JonesBrandao 

You can configure the ASA in Active/Standby HA pair. This does not use a VIP like HSRP, rather you define an active and standby IP address. Upon failover the active IP address (and MAC address) moves over to the other newly active ASA.

 

Here is an example using ASDM to configure.

https://www.youtube.com/watch?v=Tj9INEKiQHM

Configuration guide.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/asdm77/general/asdm-77-general-config/ha-failover.html#ID-2107-000000a8

 

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card