×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

2 sites with ASAs, same public subnet, can they share a virtual IP?

Unanswered Question
Jan 19th, 2010
User Badges:

We are planning on bringing up a second site with a public class C, and putting ASAs at each site - at the new site in a failover config, and the previous site as a single unit (not failover or standby).     The new site will be primary, and the previous site will be failover.  We want to have one IP for users to VPN into, regardless of which site is 'up'.  Can ASAs do this?  I've enclosed a pic (public IPs replaced) to clarify.  Any comments or info is greatly appreciated.


Colo-ND.png

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jon Marshall Tue, 01/19/2010 - 08:57
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Jbiederstedt wrote:


We are planning on bringing up a second site with a public class C, and putting ASAs at each site - at the new site in a failover config, and the previous site as a single unit (not failover or standby).     The new site will be primary, and the previous site will be failover.  We want to have one IP for users to VPN into, regardless of which site is 'up'.  Can ASAs do this?  I've enclosed a pic (public IPs replaced) to clarify.  Any comments or info is greatly appreciated.



John


As far as i know this cannot be done because you can only have 2 firewalls in a failover pair. You cannot use 3 firewalls in the same failover group.


You could run active/standby between the 2 sites as long as you have a L2 link between the sites which it looks like you do but then you would only have one ASA in each location.


Jon

Actions

This Discussion