Author Topic: ASA 5525 context group failover (Read 21857 times)

czekon26 · « **on:** December 08, 2016, 02:50:34 AM »

Hello,

I have a question regarding context failover on the Asa 5525. I have 2 ASA nodes which contain 2 failover groups of different contexts. Both groups are active on one ASA node. The thing is there is too much traffic going through that ASA. I would like to move one context group and make it active on the standby ASA. Is that possible? Is this gonna cause the service interruption during the switch over? What about the established VPN sessions. Are those will drop?

Looking forward to hear some tips and advices.

MC · « **Reply #1 on:** December 08, 2016, 11:38:08 PM »

The whole point of having two failover group usually so that you can make one group active on one ASA and the other active on another ASA. I haven't done this for a while but I believe it's just one command to switch group to another ASA. I would certainly plan for service interruption both regular traffic and VPN.

czekon26 · « **Reply #2 on:** December 21, 2016, 07:52:44 AM »

I done the failover with no service interruption. As this is state full failover the connections copy was on the standby FW. Users didn't report any service break. Thanks

MC · « **Reply #3 on:** December 26, 2016, 09:16:16 PM »

Thank you for the update. Glad it went well for you.

Search

User Info

Author Topic: ASA 5525 context group failover (Read 21857 times)

czekon26

ASA 5525 context group failover

MC

Re: ASA 5525 context group failover

czekon26

Re: ASA 5525 context group failover

MC

Re: ASA 5525 context group failover

Related Topics