2
votes
0answers
130 views

Keepalived failover not working for Static NAT target behind Cisco ASA

I've got a Cisco ASA[0] with a pair of Linux boxes in the DMZ running Keepalived and HAproxy acting as a load-balancing failover pair for another pair of Windows servers, also in the DMZ. I'm ...
0
votes
1answer
189 views

Cisco ASA failover can't ping gateway

I'm currently trying to set up a failover network for my Cisco ASA 55x0 using the SLA traking. I have the "outside" interface (network 89.x.x.48/29) and the "outside2" interface (network ...
0
votes
1answer
117 views

Secondary fallback/failover network on Cisco ASA

In my network there is a Cisco ASA 55x0 with "inside" interface (network 192.168.79.0/24) and "outside" interface (network 89.x.x.48/29) There is this nat rule: object network NAToutside nat ...
2
votes
1answer
249 views

VPN Failover Cisco ASA 5505

So basically we have a Cisco ASA 5505 (we have inherited this from a customer, none of us have any experience with Cisco's). Now essentially we have to WAN lines which we have setup in Failover, via ...
1
vote
1answer
1k views

Fail-over VPN with two ISPs and Cisco ASA 5500 Series

We have a couple of branch offices that need to connect to a main site. We plan to use Cisco ASAs 5515 to establish VPN connections. We would also like to have 2 ISPs at each location to make the ...
0
votes
1answer
1k views

Force failover a Cisco ASA

I have two ASA in a lan state primary\secondary configuration. None of them have "failover active" or "no failover active" in their configuration. Would it be proper to failover in a manner such as: ...
0
votes
2answers
857 views

Will traffic get through a standby firewall if the active firewall's interface to the gateway goes down?

Here is the scenario. I have two ASA 5510's in Active/Standby. Each of them has a single uplink to one of two routers (HSRP1 and HSRP2) configured in HSRP. Disaster strikes and the interface ...
2
votes
1answer
394 views

Cisco ASA force failover from command line

I have 2 independent traffic routes to my servers. They are serviced by a failover Cisco ASA5505 pair. However, should my gigabit switch on the main route fail (or main internet feed), the ASA will ...
0
votes
1answer
512 views

How to adjust ASA Failover Times?

I want to adjust my failover poll timing. The proposed column is what I am wanting to set it up as. I believe the following commands will obtain what I want from the first two rows but Im not sure ...
2
votes
2answers
2k views

ASA Active/Standby Failover: Is a standby by IP address needed on inside/outside interfaces?

It would seem that only a standby address that would be needed is for the "failover" interface. This is given with the following command for example: failover interface ip failover_link 10.99.99.253 ...
0
votes
1answer
451 views

Cisco ASA failover with single connection

I would like to setup two Cisco ASA firewalls in a failover configuration. However, my ISP gives me a single address and ethernet port on their CPE device. I am assuming that I would then need to ...