ASA 8.x Active/Standby and EIGRP

[paa]

Hi! I try to implement HA-configuration with two ASA and two 2821 routers.

! [ASA-1] [2821] !

![Local] < >< >[ISP]!

! [ASA-2] [2821] !

Is it correct configuration?

1) Configure EIGRP on every 2821 to distribute default gw from ISP to ASA

2) Configure EIGRP on every ASA

3) In Active/Standby mode standby ASA don't participate in routing process and don't forward traffic.

Do you know cisco's documents about HA-design with ASA 8.0 and EIGRP?

[mbroberson1]

Are you just trying to implement active/standy with you 2 ASA's and your internet router is attached to the "outside" interface's of the ASA's? If this is so then the configuration is relatively easy. I am not sure I understand where EIGRP comes into the picture?

[paa]

Yes, I try to implement active/standby config. Internet routers are connected to ASA's outside interface. I try to provide redundancy connection of ASA to ISP trought my two routers, I don't want to use HSRP between them, so I think that EIGRP is much better than HSRP.

[mbroberson1 · Accepted solution]

paa@logis,

I would just forget both the EIGRP, and HSRP unless there is some real underlying reason you need thes for this particular type of setup. You don't need either HSRP or EIGRP for Active/standby config. The attached config snippet is all there is to this setup, of course you would simpy add your default static route such as "route outside 0.0.0.0 0.0.0.0 . Let me know if this helps!

Thanks,

Brandon

[mbroberson1]

Oh,

One more thing. You will just connect a crossover cable between the 2 ASA's and your set! You can test the failover by performing a "failover active" from the secondary ASA, or a "no failover active" from the primary ASA.

Thanks,

Brandon