Hot Downloads

Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1
  • 2

TOPIC: Load Balancing ASA

Load Balancing ASA 6 years 6 months ago #34670

  • JamieP
  • JamieP's Avatar
  • Offline
  • Frequent Member
  • Posts: 60
  • Karma: 0
Hi,

I need to configure two ASA's as gateways, i know you can configure them as a HA pair with active/standby. But can you configure them to load balance accross both ASA's
Jamie Parks
Network Engineer, UK
The administrator has disabled public write access.

Re: Load Balancing ASA 6 years 5 months ago #34684

  • skepticals
  • skepticals's Avatar
  • Offline
  • Expert Member
  • Posts: 783
  • Karma: 0
Yes, you can do an active/active pair; however, you can't if you have remote access VPNs. I do; so I have to go the active/stanby route.
The administrator has disabled public write access.

Re: Load Balancing ASA 6 years 5 months ago #34685

  • skepticals
  • skepticals's Avatar
  • Offline
  • Expert Member
  • Posts: 783
  • Karma: 0
Yes, you can do an active/active pair; however, you can't if you have remote access VPNs. I do; so I have to go the active/stanby route.
The administrator has disabled public write access.

Re: Load Balancing ASA 6 years 5 months ago #34694

  • JamieP
  • JamieP's Avatar
  • Offline
  • Frequent Member
  • Posts: 60
  • Karma: 0
thanks for the reply skepticals

I have one pair of ASA's as a firewall only, there are no VPN's setup on them. We have another pair of ASA's for that in the DMZ.

The firewall ASA's are our edge gateways and connect directly to our ISP. Will the inside interfaces of the pair have the same IP (as it does in active/standby) which i can point a default route too, or will they have seperate IP's and i need to load balance routers before the ASA's?

thanks for the help!
Jamie Parks
Network Engineer, UK
The administrator has disabled public write access.

Re: Load Balancing ASA 6 years 5 months ago #34701

  • skepticals
  • skepticals's Avatar
  • Offline
  • Expert Member
  • Posts: 783
  • Karma: 0
I'm no expert at this, but both ASAs will share an IP address (at least with active/standby) and they communicate through the management interfaces on a different VLAN.

There is actually a great failover wizard that will walk you through everything in the ASDM.
The administrator has disabled public write access.

Re: Load Balancing ASA 6 years 5 months ago #34703

  • JamieP
  • JamieP's Avatar
  • Offline
  • Frequent Member
  • Posts: 60
  • Karma: 0
Thanks for the info, i've only ever managed ASA's that are already setup, so when we get our new ones in will have to just have a play!!
Jamie Parks
Network Engineer, UK
The administrator has disabled public write access.
  • Page:
  • 1
  • 2
Time to create page: 0.079 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup