Order of Config for multiple contexts

[GRANT3779]

I'm looking to configure a pair of ASAs running two contexts in an active/active failover scenario.

Is there a "best practise" in the order of configuration sections for doing this?

Would I be correct is assuming the following -

first of all create the contexts

apply the actual configs to the contexts

configure failover groups

configure the failover links

Any pointers / tips from those who have configured these in past.

Thanks

[Francesco Molino]

Hi

Yes you're right,

1. First create contexts and assign right interfaces.

2. Configure each context (You can apply your config file but I think you will need to modify some parts like interfaces naming, some configs should be applied on the admin context and not under your private context,...)

3. Configure your failover (groups + links). Here a doc if you need help: http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/ha_active_active.html

What we usually do (again it could change based on your design) is:

- Context A is primary on ASA  1 and secondary on ASA 2

- Context B is the opposite. Context B is primary on ASA 2 and secondary on ASA 1

Thanks

PS: Please don't forget to rate and mark as correct answer if this answered your questions.