Get 30% off ITprotv.com with: You can use promo code: OSCAROGANDO2
Follow Me on Twitter:
https://twitter.com/CCNADailyTIPS
Failover: Everything needs to match between the ASA.
You can achieve two types of failover configuration with the ASA: active/active and active/standby.
Active/Active
Allows for a much greater percentage of available resources for deployment. However, active/active configuration does not provide any support for any type of VPN deployment because the ASA needs to run in Multiple Context mode. So, no further time is spent looking at this option, although it is good to know it exists.
Active/Standby
ASA device is active and passing/inspecting traffic while
the other is in standby, monitoring the state of the other until the time comes when it must take an active role. You have two configuration options when using active/standby failover:
Stateful:
Stateful configuration allows existing VPN sessions and tunnels to stay
up even when a failover has occurred and the connecting clients and sites are now entering through the previous standby device. The current connection “states” are
synchronized between devices across a dedicated stateful connection between the
two ASAs or by using the existing failover interfaces.
