ASA Firewalls | High Availability with Clustering

[@NetworkDirection]

Also have a look at: networkdirection.net/ASA+Cluster

[@ammaryasir9214]

Very useful information on this blog. Keep it up brother.

[@NetworkDirection]

Thanks Ammar, I will do my best

[@ammaryasir9214]

Beautiful explanation of clustering and difference between clustering and A/A in multi-context. Thanks

[@NetworkDirection]

Thank you so much. I’m glad you like it.

[@hemantmadan8110]

Luke, you have got great teaching skills and massive knowledge to back that up...

[@NetworkDirection]

+Hemant Madan Thank you for the compliment! I hope to have another video read in the next week or two. Keep an eye out for it!

[@takuma000]

Another great Video. Thank you.

[@NetworkDirection]

Glad you enjoyed it

[@mayankbisht3385]

Thanks man, Your video is easy to understand....

[@NetworkDirection]

Thanks for the feedback Blaze Are you planning a cluster yourself?

[@mayankbisht3385]

Network Direction actually I am working as a technical consultant & I wanted to know how does this work. I am still young and i could use this in future projects....

[@NetworkDirection]

Planning ahead, nice Let me know if you have any questions, and thanks for subscribing

[@mayankbisht3385]

Thanks I will..

[@tusharnaik4710]

Nice video

[@tamilstalin4609]

Hi bro, If possible can put video for ASA NAT, Object groups, ACL & some packet tracer and capture

[@NetworkDirection]

I've had a few requests for this now, and it's definitely on my list, so I might have to bump up the priority on this. What exactly are you looking to get out of it? I've just setup [e-mail], so please feel free to use that tell me what you're after.

[@paulfx5019]

Hi Luke, We have recently decided to co-lo our kit to DC in Sydney, our provider has supplied us 2 handoffs from same switch, are we wasting our time considering configuring ASA 5540 in active/passive failover? Cheers

[@NetworkDirection]

Is it the same switch on their end, or are the cross connects in your rack terminating in the same switch?

[@NetworkDirection]

Some sort of HA is still worthwhile. Eliminate as many single points of failure as you can

[@paulfx5019]

Same switch unfortunately

[@paulfx5019]

Agreed, is it possible to have active/passive ASA’s with LACP switch redundancy on our side with a pair of C2960-X’s? If so, are you planning to produce a training video on this subject in the near future?

[@NetworkDirection]

Well the switch will be a single point of failure, and it sounds like you can't change that. You can still use HA on the ASA's so they're not also a single point of failure Active/passive is fine. I prefer clustering if available (if the design makes sense), and active/passive after that. I don't really like active/active failover personally

[@chheangchhayheng3492]

How to build the home lab of Cluster ASA ?

[@NetworkDirection]

+Chheang Chhayheng I used physical hardware in this demo. I was fortunate to have some ASAs that needed to be configured anyway, so I recorded it. I think hardware will be your only option