ASA Failover & Switch Stack Setup
Budget: $10 – $30 CAD
I have a Cisco ASA already in production and a single 3750 switch running as my core. To improve overall reliability I now want to slot in a second ASA as the standby unit (active-passive) through ASDM, and add a second 3750, joining it to the existing switch as a true StackWise pair.
Current state
• One ASA in production, basic failover not yet enabled
• One 3750 handling all uplinks to internal servers, client VLANs and the external link
• Partial network diagrams and configs are available; I will share them as soon as we start
What needs to happen
1. Configure the new ASA, match software/feature sets, and build the failover pair in ASDM.
2. Test failover so traffic for internal servers, client devices and the outside interface keeps flowing without interruption.
3. stack the second 3750, migrate existing ports where required, verify StackWise redundancy and re-balance spanning-tree & EtherChannel links.
4. Update the existing documentation to reflect the final topology and failover procedures.
Acceptance
I will sign off once the active-standby failover has been triggered successfully, the stacked switches pass redundancy tests, and my updated docs clearly outline the end-state configuration commands and topology. Please note that the existing firewall and switch is in production so all the work need to be done via screen share.
Current state
• One ASA in production, basic failover not yet enabled
• One 3750 handling all uplinks to internal servers, client VLANs and the external link
• Partial network diagrams and configs are available; I will share them as soon as we start
What needs to happen
1. Configure the new ASA, match software/feature sets, and build the failover pair in ASDM.
2. Test failover so traffic for internal servers, client devices and the outside interface keeps flowing without interruption.
3. stack the second 3750, migrate existing ports where required, verify StackWise redundancy and re-balance spanning-tree & EtherChannel links.
4. Update the existing documentation to reflect the final topology and failover procedures.
Acceptance
I will sign off once the active-standby failover has been triggered successfully, the stacked switches pass redundancy tests, and my updated docs clearly outline the end-state configuration commands and topology. Please note that the existing firewall and switch is in production so all the work need to be done via screen share.