newbie question regarding setting up redundancy with ASA5505
Me like a lot on here have inherited a network. Currently the client has a pix 501(?) acting as a firewall at 2 seperate locations. They have grown quite a bit and have also grown to depend on their outside link to the world as well. I have set up redundant dsl lines for them and am wantng advice on possible feasability of an idea.
I would like to set up an ASA5505 at their primary location. I would also like to set it up so that if for whatever reason one of their dsl lines fails, the other would pick up without having to manually failover. I am assuming this would be done by some sort of load balancing config which I understand the 5505 can do. I would also like to set up a vpn tunnel between their primary location and the 2ndary location that has the pix. would this work? I have a prelim presentation to the client on Thursday. Would this work or should I look for another solution?
Re: newbie question regarding setting up redundancy with ASA5505
I don't think ASA5505 support Load Balancing. It does Firewall Failover in active/standby mode using Security Plus license (not the Base License). ASA5520 and above does support Firewall Failover in both active/standby and active/active mode and VPN Load Balancing using Base License.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :