Solved: ASA 5520 cable based Failover

Manesh Rajan · ‎10-03-2011

Hi,

What kind of cable is used for failover in asa 5520 ? Thanks guys

Regards

Manesh

Jennifer Halim · ‎10-03-2011

With ASA, you will just be using one of the LAN interface on the ASA for failover, ie: straight through cable.

View solution in original post

Jennifer Halim · ‎10-03-2011

With ASA, you will just be using one of the LAN interface on the ASA for failover, ie: straight through cable.

Manesh Rajan · ‎10-03-2011

Ha.. that’s great I thought it needs a special cable for failover. Also I have seen that cable based failover is only available in PIX. Is that true?

Thanks Jennifer..

varrao · ‎10-03-2011

Thats right you have cable based failover only in PIX, you can refer to this doc to clear out any doubts:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml

Hope that helps,

Varun

Thanks,
Varun Rao

Manesh Rajan · ‎10-03-2011

Hi Varun,

So this kind of configuration is not possible with ASA 5520? Please clear my doubts

varrao · ‎10-03-2011

Yes, thats right Manish, not with any model of ASA.

Thanks,

Varun

Thanks,
Varun Rao

Manesh Rajan · ‎10-03-2011

Hi Varun,

Can you just confirm that ASA 5520 supports cable based Active/Active Failover.

Thanks

varrao · ‎10-03-2011

HI Manesh,

Cisco ASA 5520 does not support cable based failover:

Note:

Cable-based failover is available only on the PIX 500 Series Security Appliance.

Thanks,

Varun

Thanks,
Varun Rao

Manesh Rajan · ‎10-03-2011

Okay .. Thanks Varun

hobbe · ‎10-03-2011

Hi

The PIX do have a special failover cable. it is a special cable that are for this purpose only.

The ASA 5520 does NOT have a special failover cable, instead you (or atleast you should) set aside and use one of the Ethernet interfaces to be used as the special failover lan. = normal RJ45 cabeling rules apply. no special cable needed.

Result in both pix and ASA case will be thesame = stateful failover.

So if the question is do you use a special cable then the answer is no, there is nothing special about the cable for the asa, its a normal RJ45 cable.

in the case of pix it is a special cable.

Can you do Active/Active stateful failover with the ASA ? Yes you can.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml#act1

Good luck

Manesh Rajan · ‎10-03-2011

Cable-Based Active/Active Failover is ONLY supported on PIX 500 series security appliance. To answer your question, no, ASA 5500 series cannot do Cable-Based Active/Active Failover,

When the security appliance is configured for Active/Active stateful failover, you cannot enable IPSec or SSL VPN. These features are unavailable. VPN failover is available for Active/Standby failover configurations only.

Nilesh Waykar · ‎10-03-2011

you can use RJ-45 straight through cable and make a stateful failover