Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Two ASA redundant design

Answered Question
Nov 12th, 2014
User Badges:

I have a design question that I would like to know how to do.

I have two server rooms in two locations with a rented 1Gbit connection between. I'm using it as a "tunk" and have access to all vlan/subnets on each location.
Each server room  has its own internet connection, ASA, switch and servers. I'm only using the connection between to sync backup/replication of servers.
In each ASA I have a license for two context.

I had an idea to run a primary virtual ASA at each location, then a secondary virtual standby ASA on the other location.
But what i'm worried about is that if there is an interruption on the connection between the server rooms the firewalls will switch Active to Standby and it will break the internet Connection for both server rooms.
I only want to switch Active to standby if a firewall goes down. Not if the Connection between the firewalls are interupted.

Is this possible to configure?

Thanks for any advice

Correct Answer by Vibhor Amrodia about 2 years 9 months ago


Check these recommendations and i think this should answer your query:-


Thanks and Regards,

Vibhor Amrodia

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)


This Discussion