topic Re: Redundant interface on transparent mode in Network Security

Redundant interface on transparent mode

kohsei.kadohno — Mon, 11 Mar 2019 18:51:26 GMT

Hello,

I have a question about transparent mode firewall by ASA5510.

I want to connect 3 circuit as inside and primary / backup outside.

====

interface Ethernet0/0

nameif inside

security-level 100

interface redundant 1

member-interface Ethernet 0/1
member-interface Ethernet 0/2
nameif outside

security-level 0

====

But I could not find the command in several document that forces the active when the interface becomes available (like preempt command).

Can ASA5510 force the active interface?

Best Regards,

Kohsei,

Re: Redundant interface on transparent mode

Nagaraja Thanthry — Thu, 07 Oct 2010 03:13:32 GMT

Hello,

If I understand you correct, you have connected Ethernet 0/1 to one ISP and Ethernet 0/2 to another ISP. Unfortunately, the Redundant interface configuration is not intended to support such scenario. When the second interface takes over the active role, it will stay active until it goes down. The Redundant interface feature is introduced to increase the reliability of the ASA connections. If my above assumption is correct, I guess the best option would be to use a hub/switch between the ISP devices and the ASA.

Hope this helps.

Regards,

Re: Redundant interface on transparent mode

kohsei.kadohno — Thu, 07 Oct 2010 03:46:59 GMT

Thanks a lot for the quick reply.

Yes, there are two ISPs in outside area, and these CE routers are configured same network segment on LAN side.

I will recommend other design for client.

Thanks again,

Kohsei,