ASA 5520 use HSRP on multi context

Unanswered Question
Sep 17th, 2010

There are two ASA 5520.

Is it possible to use HSRP on multi context each other?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jennifer Halim Fri, 09/17/2010 - 02:53

ASA does not support load balance within the same context. ASA load balance multiple context as follows:

Context-A via ASA-1, Context-B via ASA-2

You can't route half traffic for Context-A via ASA-1 and the other half through ASA-2 --> this is not supported.

iotoiotoioto Fri, 09/17/2010 - 03:52

Thank you for reply.

So how about Virtual IP address?

ASA-1 contextA and ASA-2 contextA can have a same Virtual IP using HSRP?

iotoiotoioto Fri, 09/17/2010 - 04:21

Sorry my question is bad because of my English.

I hope Active/Standby.

For exsample, One ASA(ASA-1) has context-A,context-B, other ASA(ASA-2) has context-A,context-B.

Then, ASA-1 context-A has VIP (192.168.1.1:Active), ASA-2 context-A has VIP (192.168.1.1:Standby).

Is above possible?

Jennifer Halim Fri, 09/17/2010 - 04:42

No, that is not supported.

Context-A can't be on both ASA-1 and ASA-2.

You can configure the following:

ASA-1: Context-A, Context-B, Context-C

ASA-2: Context-X, Context-Y

If ASA-2 fails for example, the Context-X and Context-Y will failover to ASA-1, and at this point, ASA-1 will have Context-A, Context-B, Context-C, Context-X and Context-Y

Hope that helps.

Diego Armando C... Fri, 09/17/2010 - 09:24

I think that you must have the same context configured in both ASA.

ASA1  context A  and context B

ASA2  contect A  and context B

In ASA 1 you can Have Context A as Acitive and Context B as standby

In ASA 2 you can have COnext A as stanby and context B as Active

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml#lanbas

Im not sure about your answer Halijenn

iotoiotoioto Tue, 09/21/2010 - 19:30

Thank you, Halijenn, diegocambronero.

You are right, I should use Failover, diegocambronero.

I'll do that.thanks.

And I'm interested in Halijenn say things.

I dont understand it very well.

It's impossible to configure HSRP on multi context, right?

> Context-A can't be on both ASA-1 and ASA-2.

I dont care about I have same context on two ASA.

Just I'd like to know to use HSRP on multi context.

So, did you answer after you already know that?

If I misunderstand, point out me.

Thanks Halijenn.

Jennifer Halim Tue, 09/21/2010 - 19:53

No, you are right... You can not configure virtual IP or HSRP for ASA in multi context mode.

Diego Armando C... Fri, 09/17/2010 - 09:29

Failover is possible but not using HSRP.

Actions

Login or Register to take actions

This Discussion

Posted September 17, 2010 at 2:44 AM
Stats:
Replies:9 Overall Rating:
Views:1246 Votes:0
Shares:0
Tags: No tags.