cisco asa failover with redundant isp config question

Posted on 2011-10-20
Last Modified: 2012-08-13
Here is the scenario and I have no idea if this can be done, and would like to know before I propose it to the boss.

2 ASA with the network failover lan license hooked up to each other however I would like each ASA to have a different ISP.  I know I can do this in hsrp, but I would like that if the WAN goes down on 1 ASA1, then ASA2 will be able to supply internet access to my network until the internet comes back to ASA1.
Question by:mmercaldi
    LVL 79

    Expert Comment

    Yes, with them in active/active failover. This is ASA's version of HSRP.
    With Active/standby, both ASA's would have to have both ISP's connected. This might actually be a better solution. That way, if either the ISP or one of the ASA's fails, the other takes over.


    Author Comment

    right but if the isp on 1 of the asa's go down, not the asa itself, will it failover.  If so what is the example of the config?
    LVL 2

    Accepted Solution

    you can configure an sla on asa 1 and if the the link to the internet fails, you can route all traffic destinated to the internet thought ASA2.

    Author Comment

    I guess that can work for what I need,

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Join & Write a Comment

    Cisco Pix/ASA hairpinning The term, hairpinning, comes from the fact that the traffic comes from one source into a router or similar device, makes a U-turn, and goes back the same way it came. Visualize this and you will see something that looks …
    I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    This video discusses moving either the default database or any database to a new volume.

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now