How to configure port-channel or redundant interface for firewall failover link?

nirupaul — Mon, 16 Dec 2019 21:20:05 GMT

Hi there,

Firewalls located 30km away from each other and linked via optical fibre. Mode: Active/Standby.

I am using 5545 firewall pair. Failover working fine with single fibre link / port from each side.

For resiliency, I want to add two fibre link for failover.

Using ASDM I can create port-channel / redundant interface easily but in failover configuration page that port-channel / redundant interface does not show up in the drop down list.

My IOS and ASDM:

boot system disk0:/asa983-29-smp-k8.bin
boot system disk0:/asdm-792-152.bin

Below link says about using port channel / redundant interface in active/standby mode

https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ha_active_standby.html

thanks and regards for help.

Paul

Re: How to configure port-channel or redundant interface for firewall failover link?

balaji.bandi — Mon, 16 Dec 2019 21:26:02 GMT

How is these link terminated both ends? to switch ? or directly to FW?

Another method is - If it terminated to switch - i believe you can do port-channel 2 links in Switch - so FW can use L2 interface.

topic How to configure port-channel or redundant interface for firewall failover link? in Network Security

How to configure port-channel or redundant interface for firewall failover link?

Re: How to configure port-channel or redundant interface for firewall failover link?