LAN-Based Active/Standby Failover Configuration

[somnath21]

Hi,

I want to configure LAN-Based Active/Standby failover between two ASA 5520.From inside interfaces of two ASA cables are connected to access switch and then access switch to core switches.From outide interfaces ethernet cabes are connected to another access switch and access switch to a single internet Router.

1)Shall I user a cross over cable as faiolver link between two ASA?

2)What configuration I have to do in the access switches?

Please guide..

regards,

som

[andrew.prince]

Som,

See the below links for the options and configurations:-

http://www.cisco.com/en/US/customer/products/ps6120/products_configuration_example09186a0080834058.shtml

http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml

HTH>

[somnath21]

Hi Andrew,

I am unable to access those materials as its asking username & pass. I have tried with my netpro user id but it's not working.Can you please attach it.

Thanks,

som

[Jon Marshall]

Som

If the ASA devices are near enough then yes you can use a crossover cable if you want to although i have always used straight thru cables and connected via switches.

If you do use switches then you can either

i) use a dedicated switch for connectivity between the ASA devices

ii) Use your existing inside switches but make sure you use a dedicated vlan for the failover.

A lot depends on how much traffic there is on your access-layer switches already. What you don't want is for keepalives to go missing because of the amount of user traffic.

If you are concerned about this a crossover cable may well be the way to go. See attached link for more details:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/failover.html#wp1047269

Jon