Link aggregation on ASA 5550

vannucchim — Mon, 11 Mar 2019 19:33:36 GMT

Hi,

i'm installing a Firewall Cisco ASA 5550 with 8 Gigabit interfaces.

I have installed firmware 8.2.3.

Is it possible to make link aggregation on ASA to have more bandwith?

Thank You.

Re: Link aggregation on ASA 5550

sean_evershed — Tue, 11 Jan 2011 12:47:34 GMT

Do you mean something like an etherchannel that you can configure on a switch?

As far as I know the best you can achive is redundant interfaces where you have a pair of active and standby interfaces. See below:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/intrface.html#wp1062296

You don't get increased bandwidth but increased uptime in case one of your interfaces fail, for example the inside interface.

Please remember to rate all posts that are helpful.

Re: Link aggregation on ASA 5550

vannucchim — Tue, 11 Jan 2011 14:06:50 GMT

yes,

i mean something like etherchannel.

Thanks.

Re: Link aggregation on ASA 5550

sean_evershed — Tue, 11 Jan 2011 14:13:13 GMT

If that is the case then about the only option available is redundant interfaces.

Re: Link aggregation on ASA 5550

PAUL GILBERT ARIAS — Tue, 11 Jan 2011 14:36:01 GMT

Hello,

You can't do link aggregation like EtherChannel.

Link aggregation on ASA 5550

cuyler.mccoy — Thu, 02 Aug 2012 14:13:08 GMT

It's supported in code 8.4

Re: Link aggregation on ASA 5550

Patrick0711 — Fri, 03 Aug 2012 04:10:41 GMT

Yup, you need to upgrade to 8.4 to set up an etherchannel bundle

Note

You cannot use interfaces on the 4GE SSM, including the integrated 4GE SSM in slot 1 on the ASA 5550, as part of an EtherChannel.

Re: Link aggregation on ASA 5550

nkarthikeyan — Fri, 03 Aug 2012 12:28:01 GMT

Hi Van,

channel-group

To assigns a physical interface to an EtherChannel, use the channel-group command in interface

configuration mode. To unassaign the interface, use the no form of this command.

channel-group channel_id mode {active | passive | on}

no channel-group channel_id

Syntax Description

Usage Guidelines Each channel group can have eight active interfaces. Note that you can assign up to 16 interfaces to a channel group. While only eight interfaces can be active, the remaining interfaces can act as standby

links in case of interface failure.

All interfaces in the channel group must be the same type and speed. The first interface added to the channel group determines the correct type and speed. channel_id Specifies the EtherChannel to which you want to assign this interface,

between 1 and 48.

mode {active | passive |

on}

You can configure each physical interface in an EtherChannel to be:

• Active—Sends and receives Link Aggregation Control Protocol (LACP)

updates. An active EtherChannel can establish connectivity with either

an active or a passive EtherChannel. You should use the active mode

unless you need to minimize the amount of LACP traffic.

• Passive—Receives LACP updates. A passive EtherChannel can only

establish connectivity with an active EtherChannel.

• On—The EtherChannel is always on, and LACP is not used. An “on”

EtherChannel can only establish a connection with another “on”

EtherChannel.

Command Mode

Firewall Mode Security Context

Routed Transparent Single

Multiple

Context System

Interface configuration • • • — •

Release Modification

8.4(1) We introduced this command.

4-37

Cisco ASA 5500 Series Command Reference

Chapter 4 cache through clear compression Commands

channel-group

If the port-channel interface for this channel ID does not yet exist in the configuration, one will be added:

interface port-channel channel_id

The Link Aggregation Control Protocol (LACP) aggregates interfaces by exchanging the Link

Aggregation Control Protocol Data Units (LACPDUs) between two network devices. LACP coordinates

the automatic addition and deletion of links to the EtherChannel without user intervention. It also

handles misconfigurations and checks that both ends of member interfaces are connected to the correct

channel group. “On” mode cannot use standby interfaces in the channel group when an interface goes

down, and the connectivity and configurations are not checked.

Examples The following example assigns interfaces to channel group 1:

hostname(config)# interface GigabitEthernet0/0

hostname(config-if)# channel-group 1 mode active

hostname(config-if)# interface GigabitEthernet0/1

hostname(config-if)# channel-group 1 mode active

hostname(config-if)# interface GigabitEthernet0/2

hostname(config-if)# channel-group 1 mode passive

Related Commands Command Description

interface port-channel Configures an EtherChannel.

lacp max-bundle Specifies the maximum number of active interfaces allowed in the

channel group.

lacp port-priority Sets the priority for a physical interface in the channel group.

lacp system-priority Sets the LACP system priority.

port-channel load-balance Configures the load-balancing algorithm.

port-channel min-bundle Specifies the minimum number of active interfaces required for

the port-channel interface to become active.

show lacp Displays LACP information such as traffic statistics, system

identifier and neighbor details.

show port-channel Displays EtherChannel information in a detailed and one-line

summary form. This command also displays the port and

port-channel information.

show port-channel load-balance Displays port-channel load-balance information along with the

hash result and member interface selected for a given set of

parameters.

Please do rate if the given information helps.

Karthik

topic Re: Link aggregation on ASA 5550 in Network Security

Link aggregation on ASA 5550

Re: Link aggregation on ASA 5550

Re: Link aggregation on ASA 5550

Re: Link aggregation on ASA 5550

Re: Link aggregation on ASA 5550

Link aggregation on ASA 5550

Re: Link aggregation on ASA 5550

Re: Link aggregation on ASA 5550