[c-nsp] Active/Standy ASA Firewalls are having duplicate IP issue on failover

[zzif]

25.11.2014, 18:50, Ahsan Rasheed wrote:
> Any other solution is possible, can we(ISP) use on our side to clear his
> arp automatically when his primary ASA firewall drops the connection and
> try to connect the secondary firewall same public IP but different Mac
> address.
>
Hi,

I would use separate addresses and HSRP/VRRP, but how about changing the 
mac addresses to be same on both ASA firewalls? In active/standby 
configuration it should work well.

Best regards,
zzif

-- 
NetInch
Email: zzif at netinch.com
WWW: http://www.netinch.com/
Tel: +358 20 734 7700

Sent using AuthMailer <http://www.authmailer.com> service