01-27-2009 11:34 AM
Hi all,
I would like to ask, if there is a lenght restriction between two ASA5510 in a LAN-Based Failover? Shouldn't be, or I'm wrong?
Thanks,
Norbert
Solved! Go to Solution.
02-03-2009 12:17 AM
Hi,
normal Ethernet length 100m. Or you can use Switches between them. It must not be a direct link.
Regards, Celio
02-02-2009 11:31 AM
Here is the Failover Configuration Limitations.
You cannot configure failover with these types of IP addresses:
IP addresses obtained through DHCP
IP addresses obtained through PPPoE
IPv6 addresses
Additionally, these restrictions apply
Stateful Failover is not supported on the ASA 5505 adaptive security appliance.
Active/Active failover is not supported on the ASA 5505 adaptive security appliance.
You cannot configure failover when Easy VPN Remote is enabled on the ASA 5505 adaptive security appliance.
VPN failover is not supported in multiple context mode
02-03-2009 12:17 AM
Hi,
normal Ethernet length 100m. Or you can use Switches between them. It must not be a direct link.
Regards, Celio
02-03-2009 11:13 AM
Hi all,
Thank's for the answer.
So actually, there can be build a failover through a fiberlink.
(asaA<-->switchA<-fiber->switchB<-->asaB).
Can PIX handle this design as well?
Greetings,
Norbert
02-04-2009 03:01 AM
Hi,
with ASA it works, we implemented the same scenario. asa5520-cat6509-fiber-cat6509-asa5520 SW 7.2(1)
With Pix (6.3) I can't remember. Looking in old configurations, I configured a stateful link and used them for stateful exchange. But I can't remember if they must be connected directly. And what's about config-sync?
Maybe it works with PIX and 7.2.
Sorry,
Celio
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: