Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Load Balance

Hi ;

I have the following setup

Provider R1- Customer R1--ASA 1--VLAN 1

Provider R2- Customer R2--ASA 2--VLAN 2

These to route path from one provider trough customer routers and 2 ASA A/A setup end with 2 VLANs , Both VLAN should be load balanced , Can this achived and How if i use GLBP in routers LAN side , how the ASA will be configured ?



Re: Load Balance

Note, the security appliance does not provide load balancing services. Load balancing must be handled by a router passing traffic to the security appliance."Refer



Re: Load Balance



There are several ways to load balance a network based on the OSI layer where you want to balance the traffic. In this case, I assume that load balance will be done on the the OSI Layer 3. You can use GLBP and make the Virtual IP the gateway for all the hosts connected to the LAN. Yes, the ASA is not capable of load balancing. In your case, I will assume that you're using it as a firewall connected inline. All you have to to do is configure the firewall features of the ASA. There might be some issue if you are to apply Network Address Translation since your gateway would be the Virtual IP of the Customer Routers. There might be some helpful information regarding GLBP and NAT on this link:

Try the GLBP host-dependent option.

Hope this helps.



New Member

Re: Load Balance

Thank you guys , but ASA will be used as A/A scenario , then will be able to load balance if using Active / Active ...

Cisco Employee

Re: Load Balance


When you use ASA in A/A, you have to create multiple context on ASA and run it in multiple context mode. You can load-balance your Vlans traffic across the firewall by creating multiple security contexts and assinging a context to one vlan and other to second vlan. This is the same as configruing MHSRP and using HSRP load-balancing. So one conext will be primary and other will be standby on one ASA and Vice-versa on the other ASA.

You can have GLBP configured on the routers and should work for you.

HTH,Please rate if it does.

-amit singh