Cisco ASA Site-to-Site IPsec VPN High Availability ?

janb · ‎02-25-2014

Hi,

Can anyone help out and confirm the described setup below?

We are going to setup an IPSec VPN tunnel between the office and the Microsoft Azure cloud.

We will have a High Availability setup with two ASA5515 at the office.

In the Azure cloud you can only configure one IP address for the IPSec VPN tunnel at the office.

So my question is you have the 5515 in an Active/Standby setup, in a failover scenario will the standby get an identical configuration, where the same IP address is used at the "outside" and can establish a the IPSec session towards the Azure cloud?

If this is the case, which mechanism ensure this, is it HSRP/VRRP ?

Thanks

Jan

Javier Portuguez · ‎02-25-2014

Hello Jan,

Configuring Active/Standby Failover

VPN SAs are replicated as well.

HTH.