management in Failover mode.

[kthned]

Hi

I have a question on management of ASA confifigured with ASA failover. I dont understand why the management ips on both ASA need to be on the same subnet and why management configuration should be part of the configuration synchronization between the ASAs.

My question came up because we have both ASAs located in different location has Out-of-band management IP in different subnet  and we wanted to configure ASA failover feature.... The one solution is to extend the vlan to the second location but I dont understand why such implementation ?

Hope to learn the philosphy behind this :)

Regards,

Umair

[Marvin Rhoads]

Failover ASA pairs are generally co-located as their inside and outside networks etc. are required to be the same. I suppose the thinking is if those are all present why not management too?