cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
14616
Views
0
Helpful
5
Replies

ASA VRRP/HSRP/GLBP

juan_jara
Level 1
Level 1

Hello, I need to implement a network with 2 ASA, but I don't know if this can work with virtual IP, like VRRP or something like that. The idea is the ASA's make the virtual IP like the router does. The failover module can do that?

Thanks for your help

5 Replies 5

Jon Marshall
Hall of Fame
Hall of Fame

Hi

Yes, the ASA can use a VIP between the 2 units. Have a look at this document for more details.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml

HTH

Jon

Thank you very much!.

The license for Active/Standby is different for Active/Active?, I've a client with an ASA with Security Plus license, but in this page (http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/specs.html#wp1006077) say just Active/Standby support, but they need work with Active/Active feature. What is the correct information?

Be careful that there are no VPN's on this ASA. You cannot do active/active with VPNs, it has to be active/standby.

Brandon

Is this true even for the latest 8.0 code? We're planning active/active but if this is still a limitation we'd have to do active/standby.

Hi Johnny

ASA cant do active/active failover for IPSEC L2L VPN tunnels thats for sure. But it may work for RA VPN tunnels.

Regards

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: