One cable modem, two ASA 5505's

Unanswered Question

is it possible to setup two ASA's behind a cable modem? currently i have the modem, then a switch, then the two ASA's. one is configured with with pulic ip x.x.x.79 and the other is congifured with public ip x.x.x.127. however, only one will work at a time. i need to do this because i don't have access to (.79) and need to setup a new ASA (.127) thanks, bill

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Mark Yeates Fri, 05/23/2008 - 19:53


It looks like the solution is dependent on the ASA licenses that you have. If you have the advanced security licence you need a switch between the modem and the ASA's so that you can use the active/standby feature. If you don't you will need a router with three interfaces to meet your requirement so that you can use the router as your gateway.


Mark Yeates Sat, 05/24/2008 - 09:12


You will need the security plus (ASA5505-SEC-PL) license to use the active/standby failover feature.


andrew.butterworth Sat, 05/24/2008 - 10:28

What do you mean when you say you can't access it? I assume you currently have a working setup using the existing ASA and now for some reason you want to bypass this ASA and put another one inline? It's a bit difficult to understand the logic here.. Internally your traffic will be pointing to the existing ASA as an exit point from your network, if you put another one inline you will need to configure your internal network to use this new 'Gateway'.

Is there some reason why you can't access the existing ASA? Can't you just do a password recovery?



This Discussion