{"id":2757,"date":"2026-01-07T23:27:00","date_gmt":"2026-01-07T23:27:00","guid":{"rendered":"https:\/\/www.balajibandi.com\/?p=2757"},"modified":"2026-01-20T18:07:03","modified_gmt":"2026-01-20T18:07:03","slug":"96-days-to-ccie-sec-v6-1-lab","status":"publish","type":"post","link":"https:\/\/www.balajibandi.com\/?p=2757","title":{"rendered":"96 Days to CCIE SEC v6.1 Lab"},"content":{"rendered":"\n

ASA Active\/Standby Configuration<\/mark><\/strong><\/p>\n\n\n\n

As per the post ASA Active\/Standby Config<\/a><\/p>\n\n\n\n

we have discussed the what is the requirement of Active \/ Standby and configuraiton.<\/p>\n\n\n\n

In this section, we will deploy the configuration and perform some testing.<\/p>\n\n\n\n

The Topology as below :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

ASAv1 and ASAv11 configured as per the configuration.<\/p>\n\n\n\n

Once we enable Failover (gig0\/2 used for failover+state link here)<\/p>\n\n\n\n

ASAv1 you see below messages :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

ASAv11 you see below messages : ( we can ignore some License stuff for now)<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Now we configure Inside and Outside Configuration along with Monitoring.<\/p>\n\n\n\n

Note: when the ASA Pair is working in Active-Standby mode, we always make changes on the Active Unit, and the Secondary is automatically replicated.<\/p>\n\n\n\n

ASAv1<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

ASAv11 configuration replicate automatically :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

we also enable ICMP inspect to ping from inside to outside on ASA1v<\/p>\n\n\n\n

policy-map global_policy\n   class inspection_default\n   inspect icmp<\/code><\/pre>\n\n\n\n
Failover checks :<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
we will do some pings from Inside to Outside<\/p>\n\n\n\n
PC1(Inside) – 10.1.1.2 to PC2 (Outside) 192.168.200.10<\/p>\n\n\n\n
Note: By default, outside to inside, ASA drops all traffic. (We need to explicitly allow the traffic from outside to inside)<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
We do some Failover and check the any drops on pings.<\/p>\n\n\n\n
On Secondary Firewall – making Active<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
we noticed 1 ping loss.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
we can also observer the failover :<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
we going to shutdown one of inside interface and since we monitoring the ASA will failover automatically.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Now we see one of interface connected to ASAv11 to Switch Failed so ASAv1 become active now.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Happy Labingggggggggggggggg .!<\/p>\n","protected":false},"excerpt":{"rendered":"
ASA Active\/Standby Configuration As per the post ASA Active\/Standby Config we have discussed the what is the requirement of Active \/ Standby and configuraiton. In this section, we will deploy the configuration and perform some testing. The Topology as below : ASAv1 and ASAv11 configured as per the configuration. Once we enable Failover (gig0\/2 used […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,2],"tags":[],"class_list":["post-2757","post","type-post","status-publish","format-standard","hentry","category-ccie-sec","category-cisco"],"_links":{"self":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/2757","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2757"}],"version-history":[{"count":2,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/2757\/revisions"}],"predecessor-version":[{"id":2774,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/2757\/revisions\/2774"}],"wp:attachment":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2757"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2757"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2757"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}