We're Sorry, Full Content Access is for Members Only...

If you like to keep on reading, Become a Member Now! Here is Why:

  • Learn any CCNA, CCNP and CCIE R&S Topic. Explained As Simple As Possible.
  • Try for Just $1. The Best Dollar You've Ever Spent on Your Cisco Career!
  • Full Access to our 581 Lessons. More Lessons Added Every Week!
  • Content created by Rene Molenaar (CCIE #41726)


295 New Members signed up the last 30 days!


100% Satisfaction Guaranteed!
You may cancel your monthly membership at any time.
No Questions Asked!


Forum Replies

  1. Hi Aaron,

    The interfaces of both your ASAs should be connected to the same segment. For example, the INSIDE interface of ASA1 and ASA2 has to be in the same VLAN and the same thing applies to the OUTSIDE interface.

    You don't have to configure an IP address on ASA2 but you do have to configure the standby IP address on ASA1:

    interface Ethernet0/0
    nameif INSIDE
    security-level 100
    ip address standby

    When the standby ASA takes over, it will still have any routes (static and learned)


  2. If ASA1 fails , does ASA2 gets interfaces IP addresses too as we do not have interfaces IP assigned currently on ASA2? What is the role of secondary IP assigned on active ASA?


  3. Rene

    The router in your diagram for my home network represents my Cisco 2821 connected to Comcast modem. What are the special security concerns with the switch connecting the 2 ASA's on the outside interface with a switch between the comcast modem and the 2 ASA firewalls

    It seems not only securing the router I now have to worry about the switch.

  4. Hi Rene,

    I had a quick question i haven't started this lab yet however i can see ASA 2 its outside interface doesn't have an ip, in a active/standby situation when the active fails does the outside ip on asa1 get replicated to asa 2 outside ip, for e.g asa1 e01 .254 ip will get replicated to asa 2s e01 interface?

    Sorry just abit confusing for a first timer doing this lab.


  5. Hi Sims,

    Here's a link to a similar answer to the same question:


32 more replies! Ask a question or join the discussion by visiting our Community Forum