Cisco ASA Firewall Active/Standby Failover Configuration
Help us continue creating free content like this…
In this video I show how to configure a pair of Cisco ASA firewalls for Active/Standby Failover.
0:11 – Introduction/Topology Overview
2:17 – Physical Equipment Overview
3:20 – The Configuration
15:50 – Additional Configuration (i.e. inside/outside interfaces, NAT, etc)
Don’t Forget to Subscribe on YouTube
Sample Configuration
ASA-1
failover
failover lan unit primary
failover lan interface FAILOVER Management0/0
failover link STATEFUL GigabitEthernet0/3
failover interface ip FAILOVER 172.16.1.1 255.255.255.252 standby 172.16.1.2
failover interface ip STATEFUL 172.16.2.1 255.255.255.252 standby 172.16.2.2
ASA-2
failover
failover lan unit secondary
failover lan interface FAILOVER Management0/0
failover link STATEFUL GigabitEthernet0/3
failover interface ip FAILOVER 172.16.1.1 255.255.255.252 standby 172.16.1.2
failover interface ip STATEFUL 172.16.2.1 255.255.255.252 standby 172.16.2.2
Change Hostname to Reflect State and Priority
prompt hostname state priority