Active/active, or active/standby?

Unanswered Question
Oct 3rd, 2008
User Badges:

I have a new order for ASA with failover to be programmed. There will be two ASA5510, and an ASA5505 behind them. The requirements are CSC, S2S VPN, and client VPN. I will be routing a subnet of public IP's through the ASA to the 5505 which will be at another location on an MPLS network behind the ASA's.


So the question is, I see that A/A doesn't support VPN failover, but A/S does. Does that mean that in context mode, the VPN tunnel wont reconnect if a context fails over, IE only one context can be the VPN endpoint? I want to make sure I use the correct programming before I get started, since this is basically my first live failover configuration, up til now, all my programing has been on single units.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
suschoud Fri, 10/03/2008 - 08:39
User Badges:
  • Gold, 750 points or more

Does that mean that in context mode, the VPN tunnel wont reconnect if a context fails over, IE only one context can be the VPN endpoint?

ANS :


A/A failover does not even support vpn termination on ASA.



So,with vpn's your only option in active/standby failover.


Check :



http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/contexts.html#wp1116132



Check : unsupported features section.



Do rate helpful posts.



Regards,

Sushil

Actions

This Discussion