Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Cisco Support Community site will be in read only mode on Dec14, 2017 from 12:01am PST to 11:30am for standard maintenance. Sorry for the inconvenience.

New Member

ASA VRRP/HSRP/GLBP

Hello, I need to implement a network with 2 ASA, but I don't know if this can work with virtual IP, like VRRP or something like that. The idea is the ASA's make the virtual IP like the router does. The failover module can do that?

Thanks for your help

5 REPLIES
Hall of Fame Super Blue

Re: ASA VRRP/HSRP/GLBP

Hi

Yes, the ASA can use a VIP between the 2 units. Have a look at this document for more details.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml

HTH

Jon

New Member

Re: ASA VRRP/HSRP/GLBP

Thank you very much!.

The license for Active/Standby is different for Active/Active?, I've a client with an ASA with Security Plus license, but in this page (http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/specs.html#wp1006077) say just Active/Standby support, but they need work with Active/Active feature. What is the correct information?

New Member

Re: ASA VRRP/HSRP/GLBP

Be careful that there are no VPN's on this ASA. You cannot do active/active with VPNs, it has to be active/standby.

Brandon

Bronze

Re: ASA VRRP/HSRP/GLBP

Is this true even for the latest 8.0 code? We're planning active/active but if this is still a limitation we'd have to do active/standby.

Re: ASA VRRP/HSRP/GLBP

Hi Johnny

ASA cant do active/active failover for IPSEC L2L VPN tunnels thats for sure. But it may work for RA VPN tunnels.

Regards

8721
Views
0
Helpful
5
Replies
CreatePlease to create content