{"id":2775,"date":"2026-01-08T23:00:00","date_gmt":"2026-01-08T23:00:00","guid":{"rendered":"https:\/\/www.balajibandi.com\/?p=2775"},"modified":"2026-01-21T20:30:00","modified_gmt":"2026-01-21T20:30:00","slug":"95-days-to-ccie-sec-v6-1-lab","status":"publish","type":"post","link":"https:\/\/www.balajibandi.com\/?p=2775","title":{"rendered":"95 Days to CCIE SEC v6.1 Lab"},"content":{"rendered":"\n

Cisco ASA Active\/Active Lab<\/a><\/strong><\/mark><\/p>\n\n\n\n

We are going to use below topology for the Lab Practice :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

ASA1 and ASA2 act as Active\/Active, ASA1 active for C1 Context and ASA2 Active for C2 Context.<\/strong><\/mark><\/p>\n\n\n\n

C1 we configure as Sales Department.<\/p>\n\n\n\n

C2 we configure as Engineer Department.<\/p>\n\n\n\n

We need to enable mode to Multiple – By default ASA is in Single mode context<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

When we enable mode multiple ASA will reboot automatically.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Once ASA reboot we can check the mode to confirm its multiple.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

We need to do same step on other ASA to become multi mode so we can configure Active \/ Active Mode.<\/p>\n\n\n\n

In the LAB image we have 7 interface, instead of Gig i have ethernet interface for simulation.<\/p>\n\n\n\n

On the Switch :<\/p>\n\n\n\n

we have below VLAN
SW1:<\/p>\n\n\n\n

VLAN 2 – FOR Context 1 (Sales) Inside
VLAN 3 – FOR Context 2 (Engineering) Inside
VLAN 4 – FOR MGMT (Managment)<\/p>\n\n\n\n

SW2:<\/p>\n\n\n\n

VLAN 5 – FOR Context 1 (Sales) Outside
VLAN 6 – FOR Context 2 (Engineering) Outside<\/p>\n\n\n\n

Configuring ASA1 :<\/p>\n\n\n\n

failover group 1
primary
preempt
failover group 2
secondary
preempt<\/p>\n\n\n\n

admin-context admin
context admin
config-url disk0:\/admin.cfg
allocate-interface Ethernet0 management
!
changeto context admin
!
interface management
nameif mgmt
security-level 100
ip address 172.16.10.1 255.255.255.0 standby 172.16.10.2
no shu
!
changeto system
!
context sales
config-url disk0:\/sales.cfg
join-failover-group 1
allocate-interface Ethernet1 inside_sales
allocate-interface Ethernet4 outside_sales
!
changeto context sales
!
interface inside_sales
nameif inside
ip address 192.168.10.1 255.255.255.0 standby 192.168.10.2
no shu
!
interface outside_sales
nameif outside
ip address 10.10.10.1 255.255.255.0 standby 10.10.10.2
no shu
!
!
!
moni in
moni out
!
changeto system
!
context engineering
config-url disk0:\/engineering.cfg
join-failover-group 2
allocate-interface Ethernet2 inside_engineering
allocate-interface Ethernet3 outside_engineering
!
changeto context engineering
!
interface inside_engineering
nameif inside
ip address 192.168.20.1 255.255.255.0 standby 192.168.20.2
no shu
!
interface outside_engineering
nameif outside
ip address 10.10.20.1 255.255.255.0 standby 10.10.20.2
no shu
!
!
!
moni in
moni out
!
changeto context system
wr mem all
!
failover lan unit primary
failover lan interface LAN Ether5
failover link STATE Eth6
failover interface ip LAN 10.10.30.1 255.255.255.0 standby 10.10.30.2
failover interface ip STATE 10.10.40.1 255.255.255.0 standby 10.10.40.2
!
failover
!<\/p>\n\n\n\n

Now we configure ASA2 – only LAN and State interface, so the configuration we applied on ASA 1 will be replicated automatically to ASA2.<\/p>\n\n\n\n

Config t
!
interface eth0
no shutdown
interface eth1
no shutdown
interface eth2
no shutdown
interface eth3
no shutdown
interface eth4
no shutdown
interface eth5
no shutdown
interface eth6
no shutdown
!
!
failover lan unit secondary
failover lan interface LAN Ether5
failover link STATE Eth6
failover interface ip LAN 10.10.30.1 255.255.255.0 standby 10.10.30.2
failover interface ip STATE 10.10.40.1 255.255.255.0 standby 10.10.40.2
!
failover<\/p>\n\n\n\n

As soon as we enable failover, we can see all the configuration replicated as below :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

ASA1 Group 1 Active and ASA2 is Standby<\/strong><\/mark> :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

ASA2 Group 2 Active and ASA1 is Standby<\/mark><\/strong> :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Verification of interfaces in each context of Sales and Engineering :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

Configuring Sales PC’s inside and out outside and testing ping .<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Configuring Engineering PC Inside and outside and testing ping.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Now we reload ASA2 and ASA1 become active for both the context’s<\/mark><\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Ping still works as expected :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Happy Labinggggggggggggggggggggg!<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

Cisco ASA Active\/Active Lab We are going to use below topology for the Lab Practice : ASA1 and ASA2 act as Active\/Active, ASA1 active for C1 Context and ASA2 Active for C2 Context. C1 we configure as Sales Department. C2 we configure as Engineer Department. We need to enable mode to Multiple – By default […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,2],"tags":[],"class_list":["post-2775","post","type-post","status-publish","format-standard","hentry","category-ccie-sec","category-cisco"],"_links":{"self":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/2775","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2775"}],"version-history":[{"count":5,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/2775\/revisions"}],"predecessor-version":[{"id":2797,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/2775\/revisions\/2797"}],"wp:attachment":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2775"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2775"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2775"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}