Hot Downloads

×

Notice

The forum is in read only mode.
Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1
  • 2

TOPIC: Load Balancing ASA

Load Balancing ASA 8 years 2 months ago #34670

  • JamieP
  • JamieP's Avatar Topic Author
  • Offline
  • Frequent Member
  • Frequent Member
  • Posts: 60
  • Thank you received: 0
Hi,

I need to configure two ASA's as gateways, i know you can configure them as a HA pair with active/standby. But can you configure them to load balance accross both ASA's

Re: Load Balancing ASA 8 years 2 months ago #34684

Yes, you can do an active/active pair; however, you can't if you have remote access VPNs. I do; so I have to go the active/stanby route.

Re: Load Balancing ASA 8 years 2 months ago #34685

Yes, you can do an active/active pair; however, you can't if you have remote access VPNs. I do; so I have to go the active/stanby route.

Re: Load Balancing ASA 8 years 2 months ago #34694

  • JamieP
  • JamieP's Avatar Topic Author
  • Offline
  • Frequent Member
  • Frequent Member
  • Posts: 60
  • Thank you received: 0
thanks for the reply skepticals

I have one pair of ASA's as a firewall only, there are no VPN's setup on them. We have another pair of ASA's for that in the DMZ.

The firewall ASA's are our edge gateways and connect directly to our ISP. Will the inside interfaces of the pair have the same IP (as it does in active/standby) which i can point a default route too, or will they have seperate IP's and i need to load balance routers before the ASA's?

thanks for the help!

Re: Load Balancing ASA 8 years 2 months ago #34701

I'm no expert at this, but both ASAs will share an IP address (at least with active/standby) and they communicate through the management interfaces on a different VLAN.

There is actually a great failover wizard that will walk you through everything in the ASDM.

Re: Load Balancing ASA 8 years 2 months ago #34703

  • JamieP
  • JamieP's Avatar Topic Author
  • Offline
  • Frequent Member
  • Frequent Member
  • Posts: 60
  • Thank you received: 0
Thanks for the info, i've only ever managed ASA's that are already setup, so when we get our new ones in will have to just have a play!!
  • Page:
  • 1
  • 2
Time to create page: 0.134 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup