Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

active/standby failover and VPN replication

 

 Hi Everyone,

 

If ASA is config as Active/Standby failover.

If Active ASA has VPN image,profile and plug-ins will this will also replicate to standby ASA?

or I have to manually do this on standby ASA?

 

Regards

 

MAhesh

  • VPN
1 ACCEPTED SOLUTION

Accepted Solutions
VIP Green

The VPN image and profile are

The VPN image and profile are not replicated, you will need to do this manually.  Here is a list of what is replicated in a stateful Active/Standby setup:

  • The NAT translation table

  • The TCP connection states

  • The UDP connection states

  • The ARP table

  • The Layer 2 bridge table (when it runs in the transparent firewall mode)

  • The HTTP connection states (if HTTP replication is enabled)

  • The ISAKMP and IPSec SA table

  • The GTP PDP connection database

 --

Please remember to rate and select a correct answer

-- Please remember to rate and select a correct answer
2 REPLIES
VIP Green

The VPN image and profile are

The VPN image and profile are not replicated, you will need to do this manually.  Here is a list of what is replicated in a stateful Active/Standby setup:

  • The NAT translation table

  • The TCP connection states

  • The UDP connection states

  • The ARP table

  • The Layer 2 bridge table (when it runs in the transparent firewall mode)

  • The HTTP connection states (if HTTP replication is enabled)

  • The ISAKMP and IPSec SA table

  • The GTP PDP connection database

 --

Please remember to rate and select a correct answer

-- Please remember to rate and select a correct answer
New Member

Many thanks MAhesh

Many thanks

 

MAhesh

44
Views
0
Helpful
2
Replies
This widget could not be displayed.