Nokia IP 350 Firewall Logo

Related Topics:

Anonymous Posted on Mar 17, 2009

ASA LAN failover Problem

Dear All,

I have configured LAN failover ( Active/Standby) between two ASA 5520. In cisco site it is mentioned that the failover link between two ASA should pass through a saprate switch.

I am not able to understand what is the use of this switch in between. Cant i connect both the ASA directly using a crosscable ?

Regards,

Amit Kumar

1 Answer

Anonymous

Level 1:

An expert who has achieved level 1.

Corporal:

An expert that has over 10 points.

Mayor:

An expert whose answer got voted for 2 times.

Problem Solver:

An expert who has answered 5 questions.

  • Contributor 8 Answers
  • Posted on Mar 17, 2009
Anonymous
Contributor
Level 1:

An expert who has achieved level 1.

Corporal:

An expert that has over 10 points.

Mayor:

An expert whose answer got voted for 2 times.

Problem Solver:

An expert who has answered 5 questions.

Joined: Mar 11, 2009
Answers
8
Questions
0
Helped
10094
Points
18

Hi,

The crossover cable should work fine for sure.

Best Regards,
TL

Add Your Answer

×

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

0helpful
1answer

How do i configure pppoe on asa 5520 ver8.4 and remote access vpn?

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/pppoe.html
0helpful
1answer

How do I recover firewall password?

You may refer to the steps in the link below:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/trouble.html#wp1049302

I hope this helps!
0helpful
1answer

Hello all can you please help me on how to restore the configuration of my ASA 5520? thanx

If you are going for factory reset use the following commands

asa>enable
asa#write erase
asa#reload

Dont save the configuration when it prompts for it.

if you want to restore the configuration from the backup

1. You need to have a TFTP server
2. Locate the config file on your TFTP server
3. TFTP server should be reachable from ASA

then

asa#copy tftp flash

give the tftp server ip address
give the configuration file name (as exactly on the TFTP server)

reload


0helpful
1answer

Failover best option required..

You can only do active/active if you're using multiple contexts. Active/active can give you some extra performance for your $ since you can pass traffic through both ASAs. Compare this to active/standby where the standby unit passes no traffic.

If you're pushing the 5510's to 80% capacity each in active/active mode, then you have one fail, now the one single ASA is oversubscribed. The oversubscription could cause connectivity issues that defeat the purpose of failover in the first place.

In the spirit of reliability go with active/standby. Seeing that you have two active core switches that would be pushing all of their traffic through a single 5510 in this case....it may be too much active/active may be the better solution.


0helpful
1answer

Organe color showing in Active + status led on Cisco ASA 5515

Hi the documentation lists it in detail if you donot have the docs then access the same on Cisco web site it is free
0helpful
1answer
0helpful
1answer

PIX AND ASA Configuration

Voila un link pour un bon simulateur:
http://networksims.com/pix.html
0helpful
1answer

Asa 5505 firewall problem

PPPoE is not supported when failover is configured on the security appliance, or in multiple context or transparent mode. PPPoE is only supported in single, routed mode, without failover.

http://www.cisco.com/en/US/docs/security/asa/asa81/config/guide/pppoe.html
0helpful
2answers

Problem in installing the asdm image ASA 5520 ver 7.1

I had this same issue on my ASA 5520.

1. Copy the config and IOS image to a tftp server.
2. Format flash (disk0)
3. set rommon server, ip addy, and file settings.
4. tftpdnld
5. Once the system has booted to the image copy the asa image file, asdm image file, and config to flash
6. configure asdm image default location and reload
0helpful
1answer

ASA 5510 sec - bun k9

Basic Commands pixfirewall(config)#hostname PIX !--- Naming the PIX is optional. PIX(config)#nameif ethernet2 fo security20 !--- Naming the interface is optional. It is recommended that you !--- hardcode the speed/duplex. PIX(config)#interface ethernet2 100full !--- Bring up the interface. PIX(config)#ip address fo 192.168.1.1 255.255.255.0 !--- Assign an IP address. Failover Commands PIX(config)#failover ip address fo 192.168.1.2 !--- IP address for the failover link. PIX(config)#failover lan unit primary !--- This unit is primary . PIX(config)#failover lan interface fo !--- The 'fo' interface is used for LAN failover. PIX(config)#failover lan key cisco !--- The Pre-shared key. PIX(config)#failover lan enable !--- Enables failover. PIX(config)#failover !--- Start the failover process. This message appears on the console:
LAN-based Failover: trying to contact peer failover_01.gifLAN-based Failover: Send hello msg and start failover monitoring
Not finding what you are looking for?

280 views

Ask a Question

Usually answered in minutes!

Top Nokia Computers & Internet Experts

k24674

Level 3 Expert

8093 Answers

ADMIN Andrew
ADMIN Andrew

Level 3 Expert

66831 Answers

 Mikey
Mikey

Level 3 Expert

6904 Answers

Are you a Nokia Computer and Internet Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...