cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
266
Views
0
Helpful
3
Replies

ASA Failover between three ASA

Mustafa Mubdir
Level 1
Level 1

Hi,

 

I want to make this senario for failover like in attached picture, 

 

for ASA-A its connected to deffrent ISP of ASA-B, and every ASA handle deffrent network, can i put another ASA with two context as standby for actives FW's

 

Thanks.

 

 

 

 

1 Accepted Solution

Accepted Solutions

Marvin Rhoads
Hall of Fame
Hall of Fame

No - sorry that will not work.

"The two units in a failover configuration must:

...

Be in the same context mode (single or multiple)."

Source.

View solution in original post

3 Replies 3

Marvin Rhoads
Hall of Fame
Hall of Fame

No - sorry that will not work.

"The two units in a failover configuration must:

...

Be in the same context mode (single or multiple)."

Source.

As Marvin stated, it won't work as in your picture.

But if you don't need any features that are not available in multiple-context-mode, then you could configure Active/Active-failover between ASA-A and ASA-B with one context for the operation of ASA-A and another Context for the operation of ASA-B.

Good suggestion, Karsten.

The only caveat that brings to mind is that remote access VPN isn't supported in multi-context mode. So if that's in use they couldn't go that route.

 

p.s. hope to see you at Cisco Live this year.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: