topic Re: How can I config Port-channel from ASA to Core Switch and assign I in Switching

How can I config Port-channel from ASA to Core Switch and assign IP?

NetworkRookie — Thu, 22 Sep 2022 01:52:37 GMT

I've got 2 ASA and 2 Core Switch stacked. How can I config Port-channel from ASA to Core Switch and assign IP to Port-Channel of ASA, Coreswitch. Look like gateway will be .1 in core and .2 in ASA.
From ASA1, I already used 4 ports from g1/1 - g1/4 for port-channel and g1/1-2 from ASA2
here my config:
Core:

Vlan 101

vlan 102

int range g1/0/45-48

channel-group 1 mode on

int po1

sw trunk encaps dot1q

sw trunk native vlan 101

sw mode trunk

int range g1/0/43-44

channel-group 2 mode on

int po2

sw trunk encaps dot1q

sw trunk native vlan 102

sw mode trunk

ASA1:

int g1/1

no sh

channel-group 1 mode on

int g1/2

no sh

channel-group 1 mode on

int g1/3

no sh

channel-group 1 mode on

int g1/4

no sh

channel-group 1 mode on

int po1.101

vlan 101

ip add 10.1.0.2 255.255.255.248

no sh

nameif Inside

security-level 100

ASA2:

int g1/1

no sh

channel-group 2 mode on

int g1/2

no sh

channel-group 2 mode on

int po2.102

vlan 102

ip add 10.2.0.2 255.255.255.248

security-level 50

nameif Internal

and here are subnets for 2 vlan: vlan 101: 10.1.0.0/29 vlan 102: 10.2.0.0/29

Re: How can I config Port-channel from ASA to Core Switch and assign I

Mark Elsen — Thu, 22 Sep 2022 06:19:37 GMT

>... How can I config Port-channel from ASA to Core Switch and assign IP to Port-Channel

You can't assign an IP address to a layer2 interface , only to Vlan(SVI)

Re: How can I config Port-channel from ASA to Core Switch and assign I

balaji.bandi — Thu, 22 Sep 2022 07:00:10 GMT

as per your question, you need to do as below on the Core switch :

interface Vlan 101

ip add 10.1.0.1 255.255.255.248

no shutdown

interface vlan 102

ip add 10.2.0.1 255.255.255.248

no shutdown

is this cluster deployment, then you need cluster link also.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/ha-cluster.html

Re: How can I config Port-channel from ASA to Core Switch and assign I

NetworkRookie — Fri, 23 Sep 2022 08:59:25 GMT

Light me.
As you said. I can assign IP to int vlan 101 and vlan 102 in CoreSW, so how can I switch int po1 and int po2 access to vlan 101 and 102?
I've read about Cisco ASA 5506 and higher removed vlan, so I can Switch port access to vlan in ASA5506

Re: How can I config Port-channel from ASA to Core Switch and assign I

NetworkRookie — Fri, 23 Sep 2022 09:32:25 GMT

it's stand alone deployment, not clustering or something like that.
It's a simple network topo ASA1 > Core > ASA2. Stand alone.

Re: How can I config Port-channel from ASA to Core Switch and assign I

balaji.bandi — Fri, 23 Sep 2022 10:57:13 GMT

That above suggested config should work for you.

Re: How can I config Port-channel from ASA to Core Switch and assign I

MHM Cisco World — Fri, 23 Sep 2022 13:54:09 GMT

it depend on
if you want you can config VLAN SVI in ASA
or config sub-interface ins ASA

Re: How can I config Port-channel from ASA to Core Switch and assign I

NetworkRookie — Mon, 26 Sep 2022 04:09:27 GMT

I've tried your suggest config but it's not work. maybe I did something wrong.