ASA Active/Passive.. Pre Wizard config question.

Unanswered Question
Jul 21st, 2010

Hi All,

I have a quick question regarding configuring active/passive failover.

Lets say I have 2 5510's.

I plan on using;

1 interface for lan failover(LANFAIL)
1 interface for  statefull failover (STATEFULLFAIL)

I already have a bunch of other interfaces(physical/logical) configured


and subinterfaces on my inside networks, i.e


Now I seem to be reading conflicting documentation regarding what configuration I need to configure BEFORE I run the highscalability wizard.

Do I just need to configure a single IP on my secondary firewall say on e0/1.2 on the same lan as e0/1.2 on my primary and ensure that my laptop can reach it for ASDM?

OR do I have to configure a "secondary IP" for each interface configured on the primary? or is this only neccessary for those interfaces I wish to "manage" the secondary firewall through? The reason I ask is because I have a lot of subnets configured.

Also do I need to configure IP addressing on my lan failover and statefull failover interfaces? or is that just done as part of the high scalability wizard?

Many thanks.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion