https://community.cisco.com/t5/network-security/asa5516x-and-3650-switch-stack-etherchannel/m-p/3880513#M27055 <P>Hi,</P><P>Our IT guy has designed a network layout that I am not sure about after reading the cisco guides.</P><P>We have a single ASA5516X connected to a switch stack of 2 3650's.</P><P>He has the ASA connected to the switch stack via dual port etherchannel, but I have read the below form the guides:-</P><P>&nbsp;</P><P>The ASA does not support connecting an EtherChannel to a switch stack. If the ASA EtherChannel is connected cross stack, and if the Master switch is powered down, then the EtherChannel connected to the remaining switch will not come up.</P><P>&nbsp;</P><P>IF this is the case, what is the best way to connect the ASA to the switches so that if one goes down the other stays running?</P><P>&nbsp;</P><P>Just a warning, I am not very good on cisco's, only ever used fortinets before, so if the terminology is wrong, I apologise.</P><P>&nbsp;</P> Thu, 27 Jun 2019 07:05:00 GMT mark.stewart1 2019-06-27T07:05:00Z https://community.cisco.com/t5/network-security/asa5516x-and-3650-switch-stack-etherchannel/m-p/3880513#M27055 <P>Hi,</P><P>Our IT guy has designed a network layout that I am not sure about after reading the cisco guides.</P><P>We have a single ASA5516X connected to a switch stack of 2 3650's.</P><P>He has the ASA connected to the switch stack via dual port etherchannel, but I have read the below form the guides:-</P><P>&nbsp;</P><P>The ASA does not support connecting an EtherChannel to a switch stack. If the ASA EtherChannel is connected cross stack, and if the Master switch is powered down, then the EtherChannel connected to the remaining switch will not come up.</P><P>&nbsp;</P><P>IF this is the case, what is the best way to connect the ASA to the switches so that if one goes down the other stays running?</P><P>&nbsp;</P><P>Just a warning, I am not very good on cisco's, only ever used fortinets before, so if the terminology is wrong, I apologise.</P><P>&nbsp;</P> Thu, 27 Jun 2019 07:05:00 GMT https://community.cisco.com/t5/network-security/asa5516x-and-3650-switch-stack-etherchannel/m-p/3880513#M27055 mark.stewart1 2019-06-27T07:05:00Z https://community.cisco.com/t5/network-security/asa5516x-and-3650-switch-stack-etherchannel/m-p/3880542#M27056 <P>Hi Mark,</P><P>&nbsp;</P><P>Looking at the following doc below you are correct. I guess if this is something you had to do then there are some suggestions below from Cisco in that document if you still want to use Etherchannel. You could maybe look at redundant interfaces, also referenced in the doc.</P><P>&nbsp;</P><P><A href="https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/configuration/general/asa-97-general-config/interface-echannel.pdf" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/configuration/general/asa-97-general-config/interface-echannel.pdf</A></P><P>&nbsp;</P><P>It states -</P><P><EM>In Cisco IOS software versions earlier than 15.1(1)S2, the ASA did not support connecting an</EM><BR /><EM>EtherChannel to a switch stack. With default switch settings, if the ASA EtherChannel is connected cross</EM><BR /><EM>stack, and if the master switch is powered down, then the EtherChannel connected to the remaining</EM><BR /><EM>switch will not come up. To improve compatibility, set the stack-mac persistent timer command to a</EM><BR /><EM>large enough value to account for reload time; for example, 8 minutes or 0 for indefinite. Or, you can</EM><BR /><EM>upgrade to more a more stable switch software version, such as 15.1(1)S2.</EM></P> Thu, 27 Jun 2019 07:47:59 GMT https://community.cisco.com/t5/network-security/asa5516x-and-3650-switch-stack-etherchannel/m-p/3880542#M27056 GRANT3779 2019-06-27T07:47:59Z