0 Replies Latest reply: May 11, 2017 10:05 AM by pete9876 RSS

Steelhead w/ ASA network topology

pete9876

Hi,

 

We have a standard serial cluster deployment with multiple links and are making a change to the topology. We are adding Cisco ASA firewalls in an active/standby pair. The Steelhead will be on the outside interface of the ASA. The ASA will use dynamic routing with the WAN routers for path selection. My questions are; 1) any concerns/issues with a single network for the inpath interfaces? 2) limitations issues with the steelhead on the outside of the ASAs?

 

 

         |--- ASA(act) --- L0 RB2 W0 --- L0 RB1 W0 --- Router1 ---  |

LAN  |           HA(.24)                                                              | WAN

        | --- ASA(sby) --- L1 RB2 W1 --- L1 RB1 W1 --- Router2 --- |

 

RB1 inpath_0 172.31.255.17

RB1 inpath_1 172.31.255.18

RB2 inpath_0 172.31.255.19

RB2 inpath_1 172.31.255.20

ASA outside 172.31.255.24

Router1 172.31.255.21

Router2 172.31.255.22

 

thanks!