cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
663
Views
0
Helpful
1
Replies

ASA Failover With VLANs

Robert Ho
Level 1
Level 1

hey all, i'm sure one of you had run into this. basically, we have dual asa5520's with lan-based failover setup on a dedicated port, g0/3. their is a direct cable between the two.

<br /><br />

<br /><br />we need to move the asa's to another location but at the same time, minimize downtime. one of the options is to move one of them (secondary/standby) to the new location and connect the dedicated failover interface to an access port on a dedicated VLAN. this vlan will be used temporarily for failover. in between, it will need to traverse a few switches where 802.1Q tags are in place. once the secondary/standby is up, we will then power down primary/active. and then connect the failover interface directly.

<br /><br />

<br /><br />we cannot move both at the same time as their is quite a bit of time for transport between the old and new location.

<br /><br />

<br /><br />thanks a lot!

<br /><br />-robert

1 Accepted Solution

Accepted Solutions

celiocarreto
Level 1
Level 1

Hi Robert,

that's the right way to do. The failover-vlan can span over switches.

I had the following: asa5520 - cat6509 - fiber - cat6509 - asa5520

It works fine!

Regards, Celio

View solution in original post

1 Reply 1

celiocarreto
Level 1
Level 1

Hi Robert,

that's the right way to do. The failover-vlan can span over switches.

I had the following: asa5520 - cat6509 - fiber - cat6509 - asa5520

It works fine!

Regards, Celio

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card