Cisco ASA Training Zero To Hero | Cluster Lab Part 2 | Lesson 25
This clusters together multiple ASAs to act as a single, logical device. The integration and management still work as though this is a single device, but the clustering offers higher throughput and redundancy. This works in a slave/master model similar to the way a RAID disk array works. If one clustered ASA fails, the other has the ability to takeover operations until the failed firewall has been replaced.
The interfaces connect to two different switches, with a virtual port channel connecting the switches together. This must be done on both the inside and outside security zones.
Using clustering on the Cisco ASA is a good way to provide high availability in your network.
Clustering is my favourite HA, as it allows all ASA's to pass traffic. No ASA's are sitting there idle waiting for a failure!
This can be done in a few different ways. One of the best is with spanned-etherchannel mode. This allows for VSS or vPC on the switching infrastructure, and a single port-channel for the entire cluster.
This is supported further by the cluster control link (ccl). This is used so the master can communicate flow details with the slave units.
Clusters can even be used with multiple context mode.
Happy Learning!!!