Cisco ASA Failover Link Redundancy

Simon Rittner — Fri, 21 Feb 2020 16:28:27 GMT

Hi folks,

at one of my customer´s sites I was confronted with a split brain ASA failover situation. Unfortunately the SFP of the failover link was broken. Both firewalls did not "see" each other while the failover link was broken.

I did not find a solution to eliminate this single point of failure. I tried to use a Port-Channel as failover interface but the command was rejected by ASA.

Is there any chance to get the failover interface set up redundant?

Regards

Simon

Re: Cisco ASA Failover Link Redundancy

Karsten Iwen — Thu, 15 Nov 2018 13:18:27 GMT

Which ASA software version are you using? In newer versions, EtherChannels should work for the FO-link.

Instead of using a channel, you can also configure the redundant interfaces for this link:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/general/asa-94-general-config/interface-echannel.html#ID-2077-000000af

topic Cisco ASA Failover Link Redundancy in Network Security

Cisco ASA Failover Link Redundancy

Re: Cisco ASA Failover Link Redundancy