topic ASA SM Backplane in Network Security

ASA SM Backplane

cisco.bloke — Tue, 12 Mar 2019 03:03:34 GMT

Hi,

We have a new ASA SM in out 6500 chassis. The old FWSM showed 6 Gb ports, G1/1-6 and a port channel of 305.

The new ASA just shows a TenGig port, is this correct, the documentation states it's 20Gb.

Thanks

Jim

Re: ASA SM Backplane

Jouni Forss — Tue, 12 Nov 2013 08:27:00 GMT

Hi,

This is from a Cisco Live! presentation. You can find the whole document/presentation from the Cisco Live! 365 site where you can register free and get access to the presentations.

https://www.ciscolive365.com/connect/publicDashboard.ww

The presentations name is

Maximizing Firewall Performance BRKSEC-3021

Hope this helps

- Jouni

ASA SM Backplane

cisco.bloke — Tue, 12 Nov 2013 08:34:29 GMT

Thanks Jouni,

I saw that but I was trying to confirm if:

- 20Gb is actually 20Gb and not 10Gb full duplex.

- Why there's a single it says TenGigibitEthenet 2/3 port on the 6500.

Any ideas?

Jim

ASA SM Backplane

Jouni Forss — Tue, 12 Nov 2013 09:27:32 GMT

Hi,

The document/presentation says the following on the next page

Architecture similar to ASA5585

‒Hash-based load balancing to MAC links with 10Gbps unidirectional flow cap

‒Minor throughput impact due to extra headers (VLAN/internal)

‒Data link subsystem optimized for extra cores

Improved switch integration over FWSM

‒No switch-side Etherchannel

‒Local egress packet replication

The page does talk about LINKS but I cant really say anything than guess.

The ASASM model along with ASA 1000V are the ASA models I have never used.

- Jouni

ASA SM Backplane

cisco.bloke — Tue, 12 Nov 2013 10:03:49 GMT

Thanks, I was hoping someone at cisco could confirm this is normal behaviour.

Cheers

Jim

Re: ASA SM Backplane

Jouni Forss — Tue, 12 Nov 2013 10:09:21 GMT

Hi,

I haven't seen that many Cisco people answering question on the Firewall section lately. Better to open a TAC case directly if its possible.

Here is a link to a podcasta about the ASA SM. I have not listedned it myself (yet) so I am not sure if it contains any confirmation to what you are asking. But its been done by the Cisco TAC people

https://supportforums.cisco.com/docs/DOC-19114

Hope it helps

- Jouni