ASA 5510 newbie question

Answered Question
Jun 25th, 2007
User Badges:

Hi.I have a question regarding ASA and VLANs.The situation is like this in a remote office I will get the link to our central office and our internet link over the same physical optical cable but different VLANS(one tagged,other untagged).

I did some reading and it seems the best thing to do is to make 2 subinterfaces on the physical interface,put them in different VLANs and assign them corresponding IP addresses(like on a router).Am I on the right path here or should something else be done to male such a configuration work?


And there is another question I wanted to ask regarding the internet link. From the pictures I received from there are 2 sets of IP addresses.One set is for a point-to-point link between the ASA and the providers equipment.But the other set is marked as a directed IP route(rough translation,don't know if translation is correct) with 4 usable IP addresses.As the ASAs will be in failover and I need 2 IP addresses because of that should I use the 2nd larger range?

Correct Answer by pradeepde about 9 years 10 months ago

The security appliance supports two failover configurations, Active/Active Failover and Active/Standby Failover. Each failover configuration has its own method to determine and perform failover. With Active/Active Failover, both units can pass network traffic. This lets you configure load balancing on your network. Active/Active Failover is only available on units that run in multiple context mode. With Active/Standby Failover, only one unit passes traffic while the other unit waits in a standby state. Active/Standby Failover is available on units that run in either single or multiple context mode. Both failover configurations support stateful or stateless (regular) failover.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
pradeepde Fri, 06/29/2007 - 10:10
User Badges:
  • Bronze, 100 points or more

The security appliance supports two failover configurations, Active/Active Failover and Active/Standby Failover. Each failover configuration has its own method to determine and perform failover. With Active/Active Failover, both units can pass network traffic. This lets you configure load balancing on your network. Active/Active Failover is only available on units that run in multiple context mode. With Active/Standby Failover, only one unit passes traffic while the other unit waits in a standby state. Active/Standby Failover is available on units that run in either single or multiple context mode. Both failover configurations support stateful or stateless (regular) failover.


Actions

This Discussion