[c-nsp] IOS Firewall sessions

Brian Stiff (bstiff) bstiff at cisco.com
Fri May 26 12:39:13 EDT 2006


> > IOS Firewall Failover does not allow asymmetric routing, 
> active/active 
> > capability or load balancing.
> 
> How is Cisco's recommendation to combine that with HSRP/GBLP?
> 
> (where you just can't guarantee symmetric routing, in the 
> "general" case)

Stateful Firewall Failover is only applicable with Active/Standby HSRP.
IOS offers no capability to offer failover on any sort of active/active
scenario, GLBP, or asymmetric routing.  As I pointed out, the applicable
use cases are limited.

Regards,
Brian



More information about the cisco-nsp mailing list