asa failover

Posted on 2015-01-09
Last Modified: 2015-01-09
I need to do an asa failover, I have attached a picture for identification. Will I be able to do the failover in this situation? I have different IP on each side. The link in the middle between the firewalls will obviously match. Uusally when you do the failover, the interfaces IP’s match, are on the same network. If I can’t do that, are there any other option for me to have an asa failover in this situation?
Question by:Shark Attack
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2

Author Comment

by:Shark Attack
ID: 40541351
Also, I have two different ISP connections as shown in the picture
LVL 29

Assisted Solution

by:Jan Springer
Jan Springer earned 500 total points
ID: 40541368
You may be able to do IP SLA on the ASAs for the outside interfaces and VRRP on the inside interfaces (I have not done VRRP on the ASAs.).

Author Comment

by:Shark Attack
ID: 40541389
is there a reason why I can't do vrrp inside and out or ip sla on inside and outside?
LVL 29

Accepted Solution

Jan Springer earned 500 total points
ID: 40541393
You cannot do VRRP on the outside interface because they are different subnets.

You might be able to do IP SLA on the inside interfaces but the best thing would be to put IP SLA on a layer 3 switch to select the default route depending upon the SLA configuration.

Featured Post

Create the perfect environment for any meeting

You might have a modern environment with all sorts of high-tech equipment, but what makes it worthwhile is how you seamlessly bring together the presentation with audio, video and lighting. The ATEN Control System provides integrated control and system automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses
Course of the Month7 days, 7 hours left to enroll

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question