configuring load balance and active active

Unanswered Question
Mar 9th, 2010
User Badges:

Hi,


My client has purchased two 2951 router and two ASA 5510. He has taken 10mbps two link of different ISP.


His requirement is to use both the links simultaneously. His requirement is to loadbalance two links and ASA is to be configured Active/Active.


Kindly help me in getting configuration of the above scenario.


Regards


Suresh Kumar

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Federico Coto F... Wed, 03/10/2010 - 09:46
User Badges:
  • Green, 3000 points or more

Hi,


You can configure the pair of ASAs in A/A failover as long as you have it configured with security contexts. This means than 1 ASA is going to be the active unit for one or more contexts and the other ASA is going to be the active unit for the other contexts (while each other act as a secondary unit for the corresponding contexts of the other active unit).


This link shows the information regarding A/A failover:


http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/ha_active_active.html


Let me know if you have any questions, because having the ASAs configured in multi-mode has some restrictions.


Federico.

sureshkumaar13 Thu, 03/18/2010 - 05:47
User Badges:

Hi,


I have configured glbp on both the routers(2951) for load balancing two different isps with different dns, also configured active/standby on asa 5510.


Now i am facing problem, some users were able to browse internet and others were unable to browse. Also some users disconnected from the internet in between.


Note: We are using seperate DHCP servere inside lan.


Option-2: Also we removed glbp, and applied two dynamic routes  for both the routers in asa, but still we are facing the same problem as above.


Can someone help me on solving this problem.


Regards


Suresh

sean_evershed Thu, 03/18/2010 - 06:46
User Badges:
  • Gold, 750 points or more

This thread may help:


https://supportforums.cisco.com/thread/345692;jsessionid=CB534B02F412845A6F6CCCFE76EDAC5D.node0


One possibility mentioned  is to configure a security context for each ISP on the ASA and associate half of the VLANs to one context and half to the other.


Do the ISP's support BGP? If so this thread also discusses using it to load balance traffic.

Actions

This Discussion

Related Content