topic Re: ASAv interface aggregation in Network Security

ASAv interface aggregation

hoarea — Fri, 21 Feb 2020 16:09:06 GMT

ASAv does not support LACP. Is there any way of aggregating multiple interfaces to give greater throughput? e.g if you just have inside and outside networks how could you provide, for example, 2 Gbps connections to each network? ASAv does support bridge-groups in routed mode - does aggregation of interfaces into bridge-groups increase network capacity?

Re: ASAv interface aggregation

balaji.bandi — Sat, 25 Aug 2018 10:58:20 GMT

ASAv is virtual rely on virtual environment.

What is the Goal here ? You need redundancy on Esxi / vSwitch side.

if that not the case explain more ?

Re: ASAv interface aggregation

hoarea — Sun, 26 Aug 2018 08:07:17 GMT

Hi,

I need throughput. ASAv50 rated as up to 8Gbps throughput but if you only have Inside and outside or north and south connections (as is typical) then the very most you can get through the firewall is 2Gbps, using just one interface in each area. For a real, physical firewall you would bond the interfaces using LACP but this is not possible with ASAv.

Re: ASAv interface aggregation

balaji.bandi — Sun, 26 Aug 2018 09:26:15 GMT

Then you need look at Hypervisor level ( example : esxi). where the ASAv hosted as VM.

Good example article to understand virtual infrastructure.

https://www.vmware.com/pdf/esx_network_planning.pdf

Re: ASAv interface aggregation

Mohammed al Baqari — Sun, 26 Aug 2018 09:45:05 GMT

You can have LACP in ASAv. If you are looking for 2Gbps you need to get
ASAv30. See the link below for different versions of ASAv and the
correspondence throughput.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa99/asav/quick-start/asav-quick/intro-asav.html