topic ASA 5525 X Redundant Interface in Network Security

ASA 5525 X Redundant Interface

nshoe18 — Tue, 12 Mar 2019 03:23:49 GMT

I am fairly new to the 5525X and am trying to figure out if I can just set 2 of the gig ports to be redundant as opposed to having to have 2 5525s. I would like to use say gig0/2 and gig0/3 as redundant in case of a port failure.

ASA 5525 X Redundant Interface

Collin Clark — Wed, 01 Jan 2014 00:16:34 GMT

You sure can. You'll want to setup an Etherchannel. Here are some directions.

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/interface_start.html#wp1319434

Hope it helps.

ASA 5525 X Redundant Interface

Jon Marshall — Wed, 01 Jan 2014 13:05:10 GMT

As Collin says you can use an etherchannel. Etherchannel will work if -

1) the ASA interfaces in the etherchannel connect to the same physical switch

2) the ASA interfaces in the etherchannel connect to members of a logical switch ie.

a) a pair of switches in a stack such as 3750/3850

b) a pair of 4500/6500 switches running VSS

c) i believe also Nexus switches using a vPC

With 2) you connect the interfaces from the ASA to different physical switches because they are seen as one logical switch.

If none of the above is applicable eg. you have a pair of 4500/6500 but not running VSS and you want to connect the ASA to both switches then ethechannel won't work. Instead you can use the redundant interface feature where one interface is active and the other is a backup and you can then connect each interface to a different physical switch -

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/interface_start.html#wp1062296

Jon