Failover with ASA

[Daniel Espley]

Hi,

is it possible to configure a Cisco 881 router to split the incoming internet connection between two ASA's? If one ASA fails then the router would switch traffic over to the second ASA. The 2nd ASA would takeover from the primary ASA through the active/standby failover configuration and crossover cable. I'm trying to avoid configuring the switch to control the traffic using VLANS if possible. i have attached a diagram to show what im trying to achieve.

Thanks

[Karsten Iwen]

What you describe is the normal way the ASA works with failover. Both ASA-systems work as one logical unit. You only have one IP that you use as next hop on the neighoring devices.


Sent from Cisco Technical Support iPad App

[Daniel Espley]

Ok but i cannot find anywhere that explains how to split internet connection from the router.  at present i have WAN on one port and LAN (ASA) on vlan 1

[Karsten Iwen]

You connect both ASAs on the build-in switch in the same VLan. Both outside ASA-interfaces have to belong to the same network.

That's all you need. The router needs to reach both ASAs in the same VLAN. There is nothing to configure a split of traffic. One ASA will be active with the primary IP. If the active ASA fails, then the second ASA will take over with the same IP.


Sent from Cisco Technical Support iPad App