cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
397
Views
0
Helpful
2
Replies

active/standby failover and VPN replication

mahesh18
Level 6
Level 6

 

 Hi Everyone,

 

If ASA is config as Active/Standby failover.

If Active ASA has VPN image,profile and plug-ins will this will also replicate to standby ASA?

or I have to manually do this on standby ASA?

 

Regards

 

MAhesh

1 Accepted Solution

Accepted Solutions

The VPN image and profile are not replicated, you will need to do this manually.  Here is a list of what is replicated in a stateful Active/Standby setup:

  • The NAT translation table

  • The TCP connection states

  • The UDP connection states

  • The ARP table

  • The Layer 2 bridge table (when it runs in the transparent firewall mode)

  • The HTTP connection states (if HTTP replication is enabled)

  • The ISAKMP and IPSec SA table

  • The GTP PDP connection database

 --

Please remember to rate and select a correct answer

--
Please remember to select a correct answer and rate helpful posts

View solution in original post

2 Replies 2

The VPN image and profile are not replicated, you will need to do this manually.  Here is a list of what is replicated in a stateful Active/Standby setup:

  • The NAT translation table

  • The TCP connection states

  • The UDP connection states

  • The ARP table

  • The Layer 2 bridge table (when it runs in the transparent firewall mode)

  • The HTTP connection states (if HTTP replication is enabled)

  • The ISAKMP and IPSec SA table

  • The GTP PDP connection database

 --

Please remember to rate and select a correct answer

--
Please remember to select a correct answer and rate helpful posts

Many thanks

 

MAhesh