cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
683
Views
0
Helpful
4
Replies

PIX/ASA LAN-Based Active/Active Failover Configuration

alig.norbert
Level 4
Level 4

Hi all,

I would like to ask, if there is a lenght restriction between two ASA5510 in a LAN-Based Failover? Shouldn't be, or I'm wrong?

Thanks,

Norbert

1 Accepted Solution

Accepted Solutions

celiocarreto
Level 1
Level 1

Hi,

normal Ethernet length 100m. Or you can use Switches between them. It must not be a direct link.

Regards, Celio

View solution in original post

4 Replies 4

didyap
Level 6
Level 6

Here is the Failover Configuration Limitations.

You cannot configure failover with these types of IP addresses:

IP addresses obtained through DHCP

IP addresses obtained through PPPoE

IPv6 addresses

Additionally, these restrictions apply

Stateful Failover is not supported on the ASA 5505 adaptive security appliance.

Active/Active failover is not supported on the ASA 5505 adaptive security appliance.

You cannot configure failover when Easy VPN Remote is enabled on the ASA 5505 adaptive security appliance.

VPN failover is not supported in multiple context mode

celiocarreto
Level 1
Level 1

Hi,

normal Ethernet length 100m. Or you can use Switches between them. It must not be a direct link.

Regards, Celio

Hi all,

Thank's for the answer.

So actually, there can be build a failover through a fiberlink.

(asaA<-->switchA<-fiber->switchB<-->asaB).

Can PIX handle this design as well?

Greetings,

Norbert

Hi,

with ASA it works, we implemented the same scenario. asa5520-cat6509-fiber-cat6509-asa5520 SW 7.2(1)

With Pix (6.3) I can't remember. Looking in old configurations, I configured a stateful link and used them for stateful exchange. But I can't remember if they must be connected directly. And what's about config-sync?

Maybe it works with PIX and 7.2.

Sorry,

Celio

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: