10-28-2009 07:45 AM - edited 03-11-2019 09:32 AM
We're considering running Zone-based FW IOS on our border routers which are ASRs. We're used to ASAs with their active/standby feature. Is there an equivalent for ZFW or do we need to rely on OSPF or HSRP?
10-28-2009 12:21 PM
IOS ZBF doesn't have stateful failover as known from the ASAs. You can find some info here http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5710/ps1018/white_paper_using_cisco_ios_zone_based_classic_fw.html
Only interface redundancy can be supported.
I hope it helps.
PK
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Log in to Community
