topic Re: ASA 8.0 redundant interfaces in Network Security

ASA 8.0 redundant interfaces

mikedelafield — Mon, 11 Mar 2019 13:11:19 GMT

hi.

i have successfully tested interface failover in version 8.0 of the ASA code; used with 2 switches to help in the event of switch failure

but given i currently use all 4 interfaces (outside, inside, DMZ1, DMZ2) i would require a total of 8 to provide full interface redundancy in this case

clearly i could buy a 4 port module in this case but i was wondering if there is any other way of doing it;

possibly using a trunk link for all 4 vlans into gigabitethernet0/0 and using gigabitethernet0/1 as the redundant interface for the trunk link of the 4 vlans.

is this possible? is there a more obvious solution than this?

please help

Re: ASA 8.0 redundant interfaces

a.alekseev — Wed, 09 Jul 2008 10:10:05 GMT

If you need more interfaces there is no sense to buy additional card.

Use VLAN's

Re: ASA 8.0 redundant interfaces

Magnus Mortensen — Sat, 12 Jul 2008 03:42:56 GMT

Its easy...

Step1) Create a redundant interface based off of two physical interfaces... lets call that interface Redundant1....

Step2) Create subinterfaces off of Redundant1 for the inside, outside and DMZ's.

interface Redundant1.10

nameif inside

yadda yadda yadda...

Make sense?

Re: ASA 8.0 redundant interfaces

mikedelafield — Fri, 01 Aug 2008 04:30:58 GMT

Hi thanks for your reply.

so i am to create a redundant interface for the Physical pair of interfaces rather than redundant interfaces for each of the various physical sub-interfaces?

Or will both work?

What is the difference with both approaches?

Re: ASA 8.0 redundant interfaces

nikuhappy2010 — Fri, 01 Aug 2008 04:36:23 GMT

Hi, Can you send a link of configuration example. Thanks

Re: ASA 8.0 redundant interfaces

nikuhappy2010 — Fri, 01 Aug 2008 06:06:33 GMT

Hi, Request to you, please post all configuration as a example so that I can understand in better way. It will be greatful for us. Thanks.

Re: ASA 8.0 redundant interfaces

mikedelafield — Fri, 01 Aug 2008 07:54:46 GMT

I have no configuration yet as i have not decided on the plan.

I am using 3 interfaces on 1 single ASA 5520 (total of 4 interfaces)

Inside, Outside, DMZ

However i have 2 switches and in the event of switch failure i would like connectivity to the firewall to remain.

Hence the idea to use a redundant interface with subinterfaces??

Re: ASA 8.0 redundant interfaces

dphills18 — Tue, 28 Oct 2008 03:52:37 GMT

when i try to configure redundant sub interfaces, i receive the following error.

ASA1(config)# interface Redundant 1.2

ERROR: % Invalid input detected at '^' marker.

ASA1(config)#

anyone have any suggestions