Cisco Cisco ASA 5545-X Adaptive Security Appliance - No Payload Encryption 技术手册

This procedure shows how to use the Cisco Adaptive Security Device Manager (ASDM) to configure load
balancing.

Note: Many of the parameters in this example have default values.

Select Configuration > Features > VPN > Load Balancing, and check Participate in Load
Balancing Cluster to enable VPN load balancing.

1. 

Complete these steps to configure the parameters for all ASAs participating in the cluster in the VPN
Cluster Configuration group box:

Type the IP address of the cluster in the Cluster IP Address text box.

a. 

Click Enable IPSec Encryption.

b. 

Type the encryption key in the IPSec Shared Secret text box and type it again in the Verify
Secret text box.

c. 

2. 

Configure the options in the VPN Server Configuration group box:

Select an interface that accepts the incoming VPN connections in the Public list.

a. 

Select an interface that is the private interface in the Private list.

b. 

(Optional) Change the priority that the ASA has in the cluster in the Priority text box.

c. 

Type an IP address for the Network Address Translation (NAT) Assigned IP Address if this
device is behind a firewall that uses NAT.

d. 

3. 

Repeat the steps on all the participating ASAs in the group.

4. 

The example in this section uses these CLI commands to configure load balancing:

VPN−ASA2(config)#vpn load−balancing