I have 2 core switches in act/act mode. both the core switches would get connected to ASA5510.
which would be the best option for failover...act/act or act/pas considering ASAs would be connected to Intranet Router & Internet Router.
You can only do active/active if you're using multiple contexts. Active/active can give you some extra performance for your $ since you can pass traffic through both ASAs. Compare this to active/standby where the standby unit passes no traffic.
If you're pushing the 5510's to 80% capacity each in active/active mode, then you have one fail, now the one single ASA is oversubscribed. The oversubscription could cause connectivity issues that defeat the purpose of failover in the first place.
In the spirit of reliability go with active/standby. Seeing that you have two active core switches that would be pushing all of their traffic through a single 5510 in this case....it may be too much active/active may be the better solution.
241 views
Usually answered in minutes!
×