03-20-2009 03:12 AM - edited 03-11-2019 08:07 AM
I have two asa 5540 and two internet lines from two different providers. I wanna create two contextes on the ASA's and assign a vpn server (site to site) on each context for each provider. My question is do i have to enable stateful failover to use active/active with the contexts or lan failover is enough?
Solved! Go to Solution.
03-20-2009 03:39 AM
VPN is not supported in multi-context mode unless you are talking about permitting IPSEC traffic through the contexts.
enable stateful failover if you do not want any interruptions during a failover event (as connection state information gets replicated to the standby firewall ) otherwise lan failover will suffice to replicate the configuration changes.
HTH
Vikram
03-20-2009 03:26 AM
I just read that with Contexts i can have no VPN so how can i configure two vpn servers with two different ISP's should i use two outside interfaces?
03-20-2009 03:39 AM
VPN is not supported in multi-context mode unless you are talking about permitting IPSEC traffic through the contexts.
enable stateful failover if you do not want any interruptions during a failover event (as connection state information gets replicated to the standby firewall ) otherwise lan failover will suffice to replicate the configuration changes.
HTH
Vikram
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: