I'd like to implement full redundancy with 2 ASA and 2 core switches running HSRP. Has anyone implemented this scenario? If yes, I'd like to know if the ASAs are in active/standby or active/active. Also, are there any sample configs out there? Thanks
In a lot of the deployments I've seen/implemented the ASAs wouldn't be connected directly to the core switches. Instead, a pair of switches would be used between the ASAs and the cores to provide redundant paths between them all. This would allow ASA1 to see core2 without having to pass through core1, etc, and therefore removes the reliance on the connected core being up. That in-turn means you could kill one core and not upset internet traffic going through the primary ASA, for example.
It really depends on more than just providing redundancy in that you need to consider how many internet circuits you have and how you want traffic to be routed normally and in the event of a failure.