Cisco ASA Firewall Active/Standby Failover Configuration

Help keep us going…

       

In this video I show how to configure a pair of Cisco ASA firewalls for Active/Standby Failover.

0:11 – Introduction/Topology Overview
2:17 – Physical Equipment Overview
3:20 – The Configuration
15:50 – Additional Configuration (i.e. inside/outside interfaces, NAT, etc)

Sample Configuration

ASA-1

failover
failover lan unit primary
failover lan interface FAILOVER Management0/0
failover link STATEFUL GigabitEthernet0/3
failover interface ip FAILOVER 172.16.1.1 255.255.255.252 standby 172.16.1.2
failover interface ip STATEFUL 172.16.2.1 255.255.255.252 standby 172.16.2.2

ASA-2

failover
failover lan unit secondary
failover lan interface FAILOVER Management0/0
failover link STATEFUL GigabitEthernet0/3
failover interface ip FAILOVER 172.16.1.1 255.255.255.252 standby 172.16.1.2
failover interface ip STATEFUL 172.16.2.1 255.255.255.252 standby 172.16.2.2

Change Hostname to Reflect State and Priority

prompt hostname state priority