Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

ASA Active/Active Question

My question goes into the VPN world. I've read when in active/active config the ASA's do not support vpn/ipsec tunnel failover. My question is does it support IPSEC/VPN's at all in active/active? I mean i realize they may not failover but if I don't care if they are down can i terminate them to 1 or is it just not possible to use VPN/IPSEC with an ASA active/active setup? Hope this helps.

4 REPLIES
New Member

Re: ASA Active/Active Question

hi sorry vpn cannot be configured on the active/active setup. it does not support for vpns on failover setup u need to configure active/standy.

regards

sebastan

New Member

Re: ASA Active/Active Question

Hi Guys,

In active / standby mode, would I use the track command to set up the 2nd [failover] vpn tunnel? I'm assuming the 2nd ISP would plug into another VLAN port on the ASA and once tracking failed, a new tunnel would be negotiated. Yes?

New Member

Re: ASA Active/Active Question

I believe that version 8.x of the ASA supports Active/Active VPN failover. I looked quickly and couldn't find the notes on this, but I know that this is something I asked about in the past and was told 8.x will support this.

Dan

Gold

Re: ASA Active/Active Question

VPN's are still unsupported in multiple context mode in 8.x.

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/contexts.html

150
Views
10
Helpful
4
Replies
CreatePlease to create content