Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Load Balancing VPN traffic

Hi all,

Id like to install  two ASA5540s in an active active configuration. Im not gonna use security contexts because it is said that VPN is not supported in this mode. So I will setup a Cisco CSS in front of these two ASAs. In this configuration, guess I have to install both ASAs as standadlone boxes and will have to configıure them seperately, right ?

Is there any way to configure both of these ASAs simultaneously through one ASDM GUI ?

Thanks in advance

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Load Balancing VPN traffic

You will need to configure the ASAs as standalone for this. You can use ASDM to manage more than one device in a seperate instance if that makes sense.

Why not use ASA VPN Load Balancing with no CSS needed? This will distrbute the load and is also scalable should you add more devices in the future. Here is a link on it

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/vpnsysop.html#wp1048834

Thanks,

Joe

2 REPLIES
Cisco Employee

Re: Load Balancing VPN traffic

You will need to configure the ASAs as standalone for this. You can use ASDM to manage more than one device in a seperate instance if that makes sense.

Why not use ASA VPN Load Balancing with no CSS needed? This will distrbute the load and is also scalable should you add more devices in the future. Here is a link on it

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/vpnsysop.html#wp1048834

Thanks,

Joe

New Member

Re: Load Balancing VPN traffic

Hi,

thanks a lot. In fact Ive been going through the same subject that you mentioned.

About your answer using ADSM, what if I change like many VPN groups on ASA#1 and would like to have ASA# receive those config changes automatically ? (No way ? right   , have to configure everything twice ?)

380
Views
0
Helpful
2
Replies
CreatePlease to create content