09-17-2010 02:44 AM - edited 03-11-2019 11:41 AM
There are two ASA 5520.
Is it possible to use HSRP on multi context each other?
09-17-2010 02:53 AM
ASA does not support load balance within the same context. ASA load balance multiple context as follows:
Context-A via ASA-1, Context-B via ASA-2
You can't route half traffic for Context-A via ASA-1 and the other half through ASA-2 --> this is not supported.
09-17-2010 03:52 AM
Thank you for reply.
So how about Virtual IP address?
ASA-1 contextA and ASA-2 contextA can have a same Virtual IP using HSRP?
09-17-2010 04:21 AM
Sorry my question is bad because of my English.
I hope Active/Standby.
For exsample, One ASA(ASA-1) has context-A,context-B, other ASA(ASA-2) has context-A,context-B.
Then, ASA-1 context-A has VIP (192.168.1.1:Active), ASA-2 context-A has VIP (192.168.1.1:Standby).
Is above possible?
09-17-2010 04:42 AM
No, that is not supported.
Context-A can't be on both ASA-1 and ASA-2.
You can configure the following:
ASA-1: Context-A, Context-B, Context-C
ASA-2: Context-X, Context-Y
If ASA-2 fails for example, the Context-X and Context-Y will failover to ASA-1, and at this point, ASA-1 will have Context-A, Context-B, Context-C, Context-X and Context-Y
Hope that helps.
09-17-2010 09:24 AM
I think that you must have the same context configured in both ASA.
ASA1 context A and context B
ASA2 contect A and context B
In ASA 1 you can Have Context A as Acitive and Context B as standby
In ASA 2 you can have COnext A as stanby and context B as Active
Im not sure about your answer Halijenn
09-21-2010 07:30 PM
Thank you, Halijenn, diegocambronero.
You are right, I should use Failover, diegocambronero.
I'll do that.thanks.
And I'm interested in Halijenn say things.
I dont understand it very well.
It's impossible to configure HSRP on multi context, right?
> Context-A can't be on both ASA-1 and ASA-2.
I dont care about I have same context on two ASA.
Just I'd like to know to use HSRP on multi context.
So, did you answer after you already know that?
If I misunderstand, point out me.
Thanks Halijenn.
09-21-2010 07:53 PM
No, you are right... You can not configure virtual IP or HSRP for ASA in multi context mode.
09-17-2010 09:25 AM
Check this link
If you are going to use multiple context you go ahead and user active active failover. It's simple.
09-17-2010 09:29 AM
Failover is possible but not using HSRP.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: