1-15
Cisco ASA Series CLI Configuration Guide
Chapter 1 Setting General VPN Parameters
Configuring Load Balancing
Detailed Steps
Step 1
Enable the use of FQDNs for load balancing with the
redirect-fqdn enable
command:
redirect-fqdn {enable | disable}
no
redirect-fqdn {enable | disable}
For example:
hostname(config)#
vpn load-balancing
hostname(config-load-balancing)#
redirect-fqdn enable
hostname(config-load-balancing)#
Step 2
Add an entry for each of your ASA outside interfaces into your DNS server if such entries are not already
present. Each ASA outside IP address should have a DNS entry associated with it for lookups. These
DNS entries must also be enabled for reverse lookup.
Step 3
Enable DNS lookups on your ASA with the
dns domain-lookup inside
command or whichever interface
has a route to your DNS server.
Step 4
Define your DNS server IP address on the ASA; for example:
dns name-server 10.2.3.4
(IP address of
your DNS server).
The following is an example of a VPN load balancing command sequence that includes an interface
command that enables redirection for a fully qualified domain name, specifies the public interface of the
cluster as
test
and the private interface of the cluster as
foo
”
hostname(config)#
interface GigabitEthernet 0/1
hostname(config-if)#
ip address 209.165.202.159 255.255.255.0
hostname(config)#
nameif test
hostname(config)#
interface GigabitEthernet 0/2
hostname(config-if)#
ip address 209.165.201.30 255.255.255.0
hostname(config)#
nameif foo
hostname(config)#
vpn load-balancing
hostname(config-load-balancing)#
nat 192.168.10.10
hostname(config-load-balancing)#
priority 9
hostname(config-load-balancing)#
interface lbpublic test
hostname(config-load-balancing)#
interface lbprivate foo
hostname(config-load-balancing)#
cluster ip address 209.165.202.224
hostname(config-load-balancing)#
cluster key 123456789
hostname(config-load-balancing)#
cluster encryption
hostname(config-load-balancing)#
cluster port 9023
hostname(config-load-balancing)#
redirect-fqdn enable
hostname(config-load-balancing)#
participate
Frequently Asked Questions About Load Balancing
IP Address Pool Exhaustion
Q:
Does the ASA consider IP address pool exhaustion as part of its VPN load-balancing method?
A:
No. If the remote access VPN session is directed to a device that has exhausted its IP address pools,
the session does not establish. The load-balancing algorithm is based on load, and is computed as an
integer percentage (number of active and maximum sessions) that each backup cluster member supplies.
Summary of Contents for 5505 - ASA Firewall Edition Bundle
Page 28: ...Glossary GL 24 Cisco ASA Series CLI Configuration Guide ...
Page 61: ...P A R T 1 Getting Started with the ASA ...
Page 62: ......
Page 219: ...P A R T 2 Configuring High Availability and Scalability ...
Page 220: ......
Page 403: ...P A R T 2 Configuring Interfaces ...
Page 404: ......
Page 499: ...P A R T 2 Configuring Basic Settings ...
Page 500: ......
Page 533: ...P A R T 2 Configuring Objects and Access Lists ...
Page 534: ......
Page 601: ...P A R T 2 Configuring IP Routing ...
Page 602: ......
Page 745: ...P A R T 2 Configuring Network Address Translation ...
Page 746: ......
Page 845: ...P A R T 2 Configuring AAA Servers and the Local Database ...
Page 846: ......
Page 981: ...P A R T 2 Configuring Access Control ...
Page 982: ......
Page 1061: ...P A R T 2 Configuring Service Policies Using the Modular Policy Framework ...
Page 1062: ......
Page 1093: ...P A R T 2 Configuring Application Inspection ...
Page 1094: ......
Page 1191: ...P A R T 2 Configuring Unified Communications ...
Page 1192: ......
Page 1333: ...P A R T 2 Configuring Connection Settings and QoS ...
Page 1334: ......
Page 1379: ...P A R T 2 Configuring Advanced Network Protection ...
Page 1380: ......
Page 1475: ...P A R T 2 Configuring Modules ...
Page 1476: ......
Page 1549: ...P A R T 2 Configuring VPN ...
Page 1550: ......
Page 1965: ...P A R T 2 Configuring Logging SNMP and Smart Call Home ...
Page 1966: ......
Page 2059: ...P A R T 2 System Administration ...
Page 2060: ......
Page 2098: ...1 8 Cisco ASA Series CLI Configuration Guide Chapter 1 Troubleshooting Viewing the Coredump ...
Page 2099: ...P A R T 2 Reference ...
Page 2100: ......