11-02-2007 07:34 AM - edited 02-21-2020 01:45 AM
Hello, I need to implement a network with 2 ASA, but I don't know if this can work with virtual IP, like VRRP or something like that. The idea is the ASA's make the virtual IP like the router does. The failover module can do that?
Thanks for your help
11-02-2007 07:53 AM
Hi
Yes, the ASA can use a VIP between the 2 units. Have a look at this document for more details.
HTH
Jon
11-06-2007 07:46 AM
Thank you very much!.
The license for Active/Standby is different for Active/Active?, I've a client with an ASA with Security Plus license, but in this page (http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/specs.html#wp1006077) say just Active/Standby support, but they need work with Active/Active feature. What is the correct information?
11-08-2007 01:20 PM
Be careful that there are no VPN's on this ASA. You cannot do active/active with VPNs, it has to be active/standby.
Brandon
12-27-2007 10:49 AM
Is this true even for the latest 8.0 code? We're planning active/active but if this is still a limitation we'd have to do active/standby.
12-27-2007 11:14 AM
Hi Johnny
ASA cant do active/active failover for IPSEC L2L VPN tunnels thats for sure. But it may work for RA VPN tunnels.
Regards
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: