topic Interface failover on single ASA in Network Security

Interface failover on single ASA

mikedelafield — Mon, 11 Mar 2019 12:14:35 GMT

We have 1 ASA firewall and 2 LAN switches. Can it be configured that the ASA connects in to both switches and in the event of switch failure connection to the firewall is still possible?

We have 4 interfaces on the ASA.

thanks

Re: Interface failover on single ASA

royalblues — Mon, 10 Mar 2008 10:45:46 GMT

You cannot do this as the ASA will not allow to have the same IP subnet on 2 of its interfaces

If you need redundancy, then you require one more ASA box which can be configured for failover

Narayan

Re: Interface failover on single ASA

mikedelafield — Mon, 10 Mar 2008 12:24:59 GMT

originally I didn't think it was possible

but i found a document relating to Redundant Interfaces.

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/intrface.html#wp1045838

has anyone used this succesfully?

i know its a strange configuration, but it is a requirement we have on 1 of our sites

Re: Interface failover on single ASA

mikedelafield — Mon, 10 Mar 2008 14:20:27 GMT

originally I didn't think it was possible

but i found a document relating to Redundant Interfaces.

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/intrface.html#wp1045838

has anyone used this succesfully?

i know its a strange configuration, but it is a requirement we have on 1 of our sites

Re: Interface failover on single ASA

chris.rosan — Tue, 11 Mar 2008 03:17:20 GMT

Mike,

That requires V8 code, which is still very early. I don't know that i'd be using it on a production system just yet.