We're Sorry, Full Content Access is for Members Only...

If you like to keep on reading, Become a Member Now! Here is why:

  • Learn any CCNA, CCNP and CCIE R&S Topic. Explained As Simple As Possible.
  • Try for Just $1. The Best Dollar You've Ever Spent on Your Cisco Career!
  • Full Access to our 644 Lessons. More Lessons Added Every Week!
  • Content created by Rene Molenaar (CCIE #41726)

463 Sign Ups in the last 30 days

100% Satisfaction Guaranteed!
You may cancel your monthly membership at any time.
No Questions Asked!


Forum Replies

  1. Rene

    the set up is like this -
    2 stacked 3850’s which are connected to ASA’s running active/standby . I have attached 2 inside interfaces via eigrp and 2 outside interfaces connected by " route outside ****** "
    is there any need for the standby firewall to have physical connections to the switch stack ? if so will they need IP’s assigned to them ?

    Also when the standby ASA takes over there are no routes in the routing table ?

    also I have configured the inside interface on the active ASA with the standby IP of the interface which its connected to on the switch s

    ... Continue reading in our forum

  2. If ASA1 fails , does ASA2 gets interfaces IP addresses too as we do not have interfaces IP assigned currently on ASA2? What is the role of secondary IP assigned on active ASA?


  3. Hi Rene,

    I’d like to know ASA cluster and inter context communication. If I have a chance, please let me know for this configuration and technology, Because some of environment, cluster is okay.

  4. Hi Art,

    Glad to hear you like it!

    On the inside I’m using, R1 is on On the outside we have with R2 using

    In labs/examples I try to stick to using the number of the router/switch as the IP address.

    This example explains how failover works on the ASA but for full redundancy, you’ll need to add some extra components yes. The two switches are still single point of failures, so is R2 on the outside.

    The switch on the outside could be replaced with two switches, perhaps in a stack:


    ... Continue reading in our forum

  5. Hello Sina

    When configuring the ASAs in active/standby mode, ASA1 is configured fully with IP addresses on all interfaces. When ASA 2 is configured, you only configure the commands that allow it to function as the standby device. This means that no outside or inside interfaces are configured and no IP addresses are configured on these interfaces.

    In the configuration of the ASA1 however, you can see the following commands implemented on interface Ethernet 0/1:

    ASA1(config)# interface Ethernet 0/1
    ASA1(config-if)# nameif OUTSIDE
    ASA1(config-if)# ip address 192
    ... Continue reading in our forum

34 more replies! Ask a question or join the discussion by visiting our Community Forum