topic ASA Failover on Etherchannel Subinterfaces in Network Security https://community.cisco.com/t5/network-security/asa-failover-on-etherchannel-subinterfaces/m-p/1854698#M459113 <HTML><HEAD></HEAD><BODY><P>From the <A href="http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/ha_overview.html#wp1077563">configuration guide</A> (emphasis in mine):</P><P></P><P>"You can use <EM><STRONG>any unused interface</STRONG></EM> on the device as the failover link; however, you cannot specify an interface that is currently configured with a name. The failover link interface is not configured as a normal networking interface; it exists for failover communication only. This interface should only be used for the failover link (and optionally for the Stateful Failover link)."</P><P></P><P>Using an Etherchannel for failover should work (reference <A href="http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/interface_start.html#wp1326437">Failover Guidelines</A> for Etherchannels) but subinterfaces no. I would say the parent interface that your attempted failover subinterface belongs to (along with the other active subinterfaces you mentioned) would make it a <EM><STRONG>used</STRONG></EM> interface.</P></BODY></HTML> Mon, 20 Feb 2012 20:02:06 GMT Marvin Rhoads 2012-02-20T20:02:06Z ASA Failover on Etherchannel Subinterfaces https://community.cisco.com/t5/network-security/asa-failover-on-etherchannel-subinterfaces/m-p/1854697#M459111 <P>hey - </P><P></P><P>anybody figured out how to use Subinterfaces on an Etherchannel for a Lan Failover link?</P><P></P><P>I successfully bundled e0/0-1 and e0/2-3 to 2 Port-Channels with a 3750X Stack - and was able to set my "nameifs" and "security level" on Port-Channel Subinterfaces like "Port-channel1.4" As a lan based failover link the subinterfaces seem&nbsp; to be unusable ....</P><P></P><P>am I missing something?</P><P></P><P>Robert </P> Mon, 11 Mar 2019 22:32:23 GMT https://community.cisco.com/t5/network-security/asa-failover-on-etherchannel-subinterfaces/m-p/1854697#M459111 robertblasey 2019-03-11T22:32:23Z ASA Failover on Etherchannel Subinterfaces https://community.cisco.com/t5/network-security/asa-failover-on-etherchannel-subinterfaces/m-p/1854698#M459113 <HTML><HEAD></HEAD><BODY><P>From the <A href="http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/ha_overview.html#wp1077563">configuration guide</A> (emphasis in mine):</P><P></P><P>"You can use <EM><STRONG>any unused interface</STRONG></EM> on the device as the failover link; however, you cannot specify an interface that is currently configured with a name. The failover link interface is not configured as a normal networking interface; it exists for failover communication only. This interface should only be used for the failover link (and optionally for the Stateful Failover link)."</P><P></P><P>Using an Etherchannel for failover should work (reference <A href="http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/interface_start.html#wp1326437">Failover Guidelines</A> for Etherchannels) but subinterfaces no. I would say the parent interface that your attempted failover subinterface belongs to (along with the other active subinterfaces you mentioned) would make it a <EM><STRONG>used</STRONG></EM> interface.</P></BODY></HTML> Mon, 20 Feb 2012 20:02:06 GMT https://community.cisco.com/t5/network-security/asa-failover-on-etherchannel-subinterfaces/m-p/1854698#M459113 Marvin Rhoads 2012-02-20T20:02:06Z