Configuring Load Balancing - Cisco FirePOWER ASA 5500 series Configuration Manual

Chapter 29 Setting General IPSec VPN Parameters

Configuring Load Balancing

To use load balancing, configure the following elements for each device that participates in the cluster.
•
•
All participants in the cluster must have an identical cluster configuration, except for the device priority
Note
within the cluster.
Configuring the Public and Private Interfaces for Load Balancing
To configure the public (outside) and private (inside) interfaces for the load-balancing cluster devices,
do the following steps:
Configure the public interface on the security appliance by entering the interface command with the
Step 1
lbpublic keyword in vpn-load-balancing configuration mode. This command specifies the name or IP
address of the public interface for load balancing for this device:
hostname(config)# vpn load-balancing
hostname(config-load-balancing)# interface lbpublic outside
hostname(config-load-balancing)#
Configure the private interface on the security appliance by entering the interface command with the
Step 2
lbprivate keyword in vpn-load-balancing configuration mode. This command specifies the name or IP
address of the private interface for load balancing for this device:
hostname(config-load-balancing)# interface lbprivate inside
hostname(config-load-balancing)#
Set the priority to assign to this device within the cluster. The range is from 1 to 10. The priority indicates
Step 3
the likelihood of this device becoming the virtual cluster master, either at start-up or when an existing
master fails. The higher you set the priority (for example, 10), the more likely it is that this device
becomes the virtual cluster master.
hostname(config-load-balancing)# priority number
hostname(config-load-balancing)#
For example, to assign this device a priority of 6 within the cluster, enter the following command:
hostname(config-load-balancing)# priority 6
hostname(config-load-balancing)#
If you want to apply network address translation for this device, enter the nat command with the NAT
Step 4
assigned address for the device:
hostname(config-load-balancing)# nat ip_address
hostname(config-load-balancing)#
For example, to assign this device a NAT address of 192.168.30.3, enter the following command:
hostname(config-load-balancing)# nat 192.168.30.3
hostname(config-load-balancing)#
OL-10088-01
Public and private interfaces
VPN load-balancing cluster attributes
Cisco Security Appliance Command Line Configuration Guide
Configuring Load Balancing
29-9