Anyone have experience with setting up active/standby ASA failover?
Just a couple questions...
what is the benefit of using a dedicated switch connecting the stateful and failover links vs going direct. Also, do i need to run a second line from the core switch to the new ASA or is this what the dedicated switch above is for?
oh, and on the second internet connection, do i really need to expand from a /30 or is that just to manage this from the outside should something happen?
Thanks.
what is the benefit of using a dedicated switch connecting the stateful and failover links vs going direct. Also, do i need to run a second line from the core switch to the new ASA or is this what the dedicated switch above is for?
oh, and on the second internet connection, do i really need to expand from a /30 or is that just to manage this from the outside should something happen?
Thanks.
Comments
-
Trifidw
Member Posts: 281
Your first question was discussed fairly in depth here: http://www.techexams.net/forums/ccip/72568-asa-failover-using-switch.html and the consenses was to not bother. I wouldn't use the same switch for both either but than again I would never use a switch between the ASA's either...
The interfaces need separate IP address unfortunately. -
tdean
Member Posts: 520
Your first question was discussed fairly in depth here: http://www.techexams.net/forums/ccip/72568-asa-failover-using-switch.html and the consenses was to not bother. I wouldn't use the same switch for both either but than again I would never use a switch between the ASA's either...
The interfaces need separate IP address unfortunately.
oh man, PERFECT!!! thank you. -
tdean
Member Posts: 520
can i use straight through cables for active/standby HW failover or not? the guy on the CBT Nuggets says yes if its V7.0 or greater, but i've read some saying only cross over cables.