HA – Active / Standby configuration with IPsec

[bcr]

Hello,

I want to do a "HA-Active/Standby" configuration of two ASAvs and then do "Remote Access - IPsec".

1. Do I need to configure the "HA-Active/Standby" then IPsec.
2. Or configure the "Remote Access - IPsec" then the "HA-Active/Standby".

Thank you in advance.

Thank you very much,

bcr.

[Rob Ingram]

Hi,
You should configure the ASA in HA (Active/Standby) first, once configured you can then setup the Remote Access VPN on the Active ASA, the configuration will then be synced to the Standby ASA.

HTH

[balaji.bandi]

You need only configure on Active node, Standby automatically get the Active config Synched.

You need to focus more how active/ standby setup to be done wth some testing failover, see if the users automatically failover VPN connections.

Your case you need to option1