tech2010
asked on
Cisco ASA Failover - Multiple IPs on all interfaces
Hi All
Is there any advantage of having primary and standby ip addresses configured on inside,outside and DMZ interfaces when you are running ASA failover in Active/Standby mode.
ip address 1.1.1.1 255.255.255.0 standby 1.1.1.2
Is there anyway to copy IPS (SSP-IPS40) configurations to standby fireawll automatically ?
Is there any advantage of having primary and standby ip addresses configured on inside,outside and DMZ interfaces when you are running ASA failover in Active/Standby mode.
ip address 1.1.1.1 255.255.255.0 standby 1.1.1.2
Is there anyway to copy IPS (SSP-IPS40) configurations to standby fireawll automatically ?
ASKER
Yes i know i can get away however is there any advantage of having multiple IP addresses on non-management interfaces i.e inside,outside and DMZ.
Hi,
You can have multiple interfaces on Inside,outside and DMZ Interfaces ,the procedure is as follows :
ASA(Config-t)#int e0 for outside and multiple interfaces in int e0 is e0.1,e0.2,e0.3,e0.4 etc and in the similar way you can have multiple interfaces for inside and dmz network.
You can have multiple interfaces on Inside,outside and DMZ Interfaces ,the procedure is as follows :
ASA(Config-t)#int e0 for outside and multiple interfaces in int e0 is e0.1,e0.2,e0.3,e0.4 etc and in the similar way you can have multiple interfaces for inside and dmz network.
ASKER
Thanks sm_feroz but I think your comment is not relevant to my question.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
the IPS configuration is unfortunately not cluster aware and needs to be manually configured on both