There are two cisco ASA 5520 that needs to be implemented in VPN Load balancing mode.
My Cisco ASA is behind the firewall. I have done natting on my external firewall for all the three DMZ interface ip (172.20.12.4,172.20.12.5,172.20.12.6) with three different public ip. I am able to connect to the VPN but after I shutdown my Master VPN , then I am unable to make VPN connections anymore.Please let me know why I am unable to make connections through my backup ASA. I dont know if i have done some worng configurations.
Please help.
The configurations are as follows:
Cisco ASA 1:
interface GigabitEthernet0/0
nameif DMZ_INTERFACE
security-level 0
ip address 172.20.12.6 255.255.255.192
vpn load-balancing
priority 6
interface lbpublic DMZ_INTERFACE
interface lbprivate Inside
cluster key wipro
cluster ip address 172.20.12.4
cluster encryption
participate
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ntp server 172.20.7.231 source mgmt
Cisco ASA2:
interface GigabitEthernet0/0
nameif DMZ_INTERFACE
security-level 0
ip address 172.20.12.5 255.255.255.192
vpn load-balancing
priority 7
interface lbpublic DMZ_INTERFACE
interface lbprivate Inside
cluster key wipro
cluster ip address 172.20.12.4
cluster encryption
participate
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ntp server 172.20.7.231 source mgmt
Regards
Ritesh
