Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

PIX/ASA LAN-Based Active/Active Failover Configuration

Hi all,

I would like to ask, if there is a lenght restriction between two ASA5510 in a LAN-Based Failover? Shouldn't be, or I'm wrong?

Thanks,

Norbert

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: PIX/ASA LAN-Based Active/Active Failover Configuration

Hi,

normal Ethernet length 100m. Or you can use Switches between them. It must not be a direct link.

Regards, Celio

4 REPLIES
Silver

Re: PIX/ASA LAN-Based Active/Active Failover Configuration

Here is the Failover Configuration Limitations.

You cannot configure failover with these types of IP addresses:

IP addresses obtained through DHCP

IP addresses obtained through PPPoE

IPv6 addresses

Additionally, these restrictions apply

Stateful Failover is not supported on the ASA 5505 adaptive security appliance.

Active/Active failover is not supported on the ASA 5505 adaptive security appliance.

You cannot configure failover when Easy VPN Remote is enabled on the ASA 5505 adaptive security appliance.

VPN failover is not supported in multiple context mode

New Member

Re: PIX/ASA LAN-Based Active/Active Failover Configuration

Hi,

normal Ethernet length 100m. Or you can use Switches between them. It must not be a direct link.

Regards, Celio

New Member

Re: PIX/ASA LAN-Based Active/Active Failover Configuration

Hi all,

Thank's for the answer.

So actually, there can be build a failover through a fiberlink.

(asaA<-->switchA<-fiber->switchB<-->asaB).

Can PIX handle this design as well?

Greetings,

Norbert

New Member

Re: PIX/ASA LAN-Based Active/Active Failover Configuration

Hi,

with ASA it works, we implemented the same scenario. asa5520-cat6509-fiber-cat6509-asa5520 SW 7.2(1)

With Pix (6.3) I can't remember. Looking in old configurations, I configured a stateful link and used them for stateful exchange. But I can't remember if they must be connected directly. And what's about config-sync?

Maybe it works with PIX and 7.2.

Sorry,

Celio

429
Views
0
Helpful
4
Replies
CreatePlease to create content