cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2193
Views
0
Helpful
3
Replies

Configuring VRRP in ASA5525 between 2 site.

maeh.ayi01
Level 1
Level 1

I am looking for a VRRP "like" setup/config in ASA5525 firewall just like VRRP in routers.

I am building a lab where i have 2 site both sites are connected with each other with an ASA5525. Those ASA5525 are also the gateway for the rest of equipment. These 2 ASA5525 are also L3 (routing) functions to connect multip. VLANS together.

Is that possible if yes then where can i start?

When i write VRRP? in my ASA5525, it show this:

Error: % unrecognized command

3 Replies 3

Jon Marshall
Hall of Fame
Hall of Fame

 

You need to setup your ASAs as an active/standby pair ie they do not support HSRP/VRRP directly. 

 

Not sure which version of code you have but just do a search for ASA failover and you will see the relevant docs. 

 

Jon

As Jon mentions, there is no VRRP (or HSRP) on the ASA. But depending on your needs and setup, you could also evaluate if the cluster-functionality has some advantages over the active/standby setup:

 

https://www.cisco.com/c/en/us/td/docs/security/asa/asa912/configuration/general/asa-912-general-config/ha-cluster.html

kapydan88
Level 4
Level 4

ASA doesnt support vrrp/hsrp. You need to use cluster (active/passive or active/active) or failover. 

Review Cisco Networking for a $25 gift card