ASA Active/Active configuration

Unanswered Question
Jan 29th, 2009


When you use an AA or AS configuration, and these devices connect to the internet, do you have to burn two public IP addresses? Do they look like one address with a virtual IP?



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Syed Iftekhar Ahmed Fri, 01/30/2009 - 01:00

Yes You use two IP addresses.

The IP address configured as Primary always sticks with the ACtive Firewall.


Mo'ath Al Rawashdeh Fri, 01/30/2009 - 01:18

Hi John,

Either in Active/Standby or Active/Active modes, two public IP addresses are needed.

However, the public IP on the Active firewall will be used for traffic, while the one on the standby will be used to continously check the failover between the Active and the standby firewalls.



This Discussion