! prepare the failover interfaces (the LAN fail and stateful link) ! This priority (name) never changes for this physical unit ! Tell this physical box its "priority" or title (Primary or secondary). ![]() ! Tell the system that each of the contexts are assigned ! By default all the contexts belongs to failover group 1. ! Request a preempt 2 minutes after reboot by the secondary unit for this group ! active for any contexts in this "failover group #2" ! Tell the failover system that the secondary unit should be ! 2 minutes after a reboot by the primary unit for this group. ! Optionally, tell the system to take over the active role ! active for any contexts in this "failover group #1" ![]() ! Tell the failover system that the primary unit should be ! Create the first of the two failover groups ! Enable automatic assignment of private MAC address to each shared context interface Starting on the unit that will be the primary, and with multiple mode and context already in place. ! Enable auto generation of mac-address for shared physical interfaces To configure ASA Security Appliance for Active/Active Failover, first you need change the firewall mode to 'multiple' and configure contexts. You can download the GNS3 lab for this scenario from here
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |