Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Contexts with Active-Active configuration


Having read the Active-Active configuration for context's it is still not clear to me. Here is what I understood please correct if I am wrong.

I have four different contexts and one admin context.

1. If I configure ASA - Unit-1 as an active device for context_1 and context_2. Obviously ASA Unit-2 is failover device for context_1 and context_2.

2. Next, I will configure ASA Unit-1 as a failover device for context_3 and context_4. Obviously ASA Unit-2 will be active for Coontext_3 and context_4.

3. So when, all is well tarffic for Context_1 and context_2 will be forwarded by Unit-1 and traffic for context_3 and context_4 will be forwarded by Unit-2.

4. When one unit fails due to some reason, second unit will be only device forwarding traffic for all the four contexts.

Please correct if I am wrong.

Share the experience.

Thanks in advance


Hall of Fame Super Blue

Re: Contexts with Active-Active configuration


Correct. Active/active still uses the concept of active/standby per context or more specifically per failover group.

So lets say you have 4 contexts + admin.

Contexts 1 & 2 are mapped to failover group 1 as is the admin context.

Contexts 3 & 4 are mapped to failover group 2.

ASA1 is active for failover group 1

ASA2 is active for failover group 2

In normal operation traffic for contexts 1,2 + admin will use ASA1 as active firewall and traffic for contexts 3 & 4 will use ASA2 as active.

If ASA1 failed then all traffic would now use ASA2.


CreatePlease login to create content