RE: ASA active/backup

He asked if it works, not if it is fully redundant for every scenario. It will still protect for every other failover issue. Obviously, the secondary firewall cannot be monitored from the outside interface.

-----Original Message-----
From: Joseph L. Brunner [mailto:joe_at_affirmedsystems.com]
Sent: Tuesday, November 06, 2012 11:08 AM
To: Ryan West; amin
Cc: ccielab_at_groupstudy.com
Subject: RE: ASA active/backup

With that solution -

What happens if the primary firewall goes down on the outside interface?

But all other interfaces remain up?

Sorry - you need more IP's.

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of Ryan West
Sent: Tuesday, November 06, 2012 10:58 AM
To: amin
Cc: ccielab_at_groupstudy.com
Subject: Re: ASA active/backup

Turn off monitoring for the outside interface and don't configure a standby address for it. You should really ask for a /29 though.

Sent from handheld.

On Nov 6, 2012, at 10:23 AM, "amin" <amin_at_axizo.com> wrote:

> Hello dear
>
> Can I configure Active/Standby backup if one of the segments will
> connect three devices and the mask is /30, I mean just two IPs are available?
>
> ASA primary 1.1..1.1/30 ==== == 1.1.1.2/30 ISP router
>
> ASA secondary IP? How I can manage that if no free IPS on for it?
>
>
>
> Regards,
>
> Amin
>
>
> Blogs and organic groups at http://www.ccie.net
>
> ______________________________________________________________________
> _ Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Nov 06 2012 - 16:11:44 ART