remote access VPN with asa high avialability active standby

[wael.kamal]

I have two asa 5520 used as active standby high avilabilty . I want to make IPSec remote access vpn what configuration needed.

I have a question the standby asa outside IP has diffrent than the active asa outside ip how will user connect to which ip and how if active is down the user can switch from down asa to the active one .

[praprama]

Hi,

Here is a config guide to configure remote access VPN on the ASA.

Regarding failover, you do not need to worry about the standby ASA IP address. When the active ASA goes down, the standby ASA at that point will take over the active IP addresses and hence the VPN tunnel would then be established with the other ASA.

Also, if you have stateful failover, the VPN tunnel would not go down during the failover event. If you dont have stateful failover, the VPN tunnel will have to re-established.

Hope this clears thing!! Let me know if there is anything unclear.

Thanks and Regards,

Prapanch