Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco ASA Site-to-Site IPsec VPN High Availability ?

Hi,

 

Can anyone help out and confirm the described setup below?

We are going to setup an IPSec VPN tunnel between the office and the Microsoft Azure cloud.

We will have a High Availability setup with two ASA5515 at the office.

In the Azure cloud you can only configure one IP address for the IPSec VPN tunnel at the office.

So my question is you have the 5515 in an Active/Standby setup, in a failover scenario will the standby get an identical configuration, where the same IP address is used at the "outside" and can establish a the IPSec session towards the Azure cloud?

If this is the case, which mechanism ensure this, is it HSRP/VRRP ?

Thanks

Jan

Everyone's tags (4)
1 REPLY

Cisco ASA Site-to-Site IPsec VPN High Availability ?

Hello Jan,

Configuring Active/Standby Failover

VPN SAs are replicated as well.

HTH.

1459
Views
0
Helpful
1
Replies
CreatePlease login to create content