topic LAN and Stateful Failover Interfaces in Network Security

LAN and Stateful Failover Interfaces

rmeans — Mon, 11 Mar 2019 12:01:29 GMT

Does anyone have any experience with using the same interface for LAN and stateful failover? Cisco documentation suggests using two interfaces. I am about to convert from a PIX 525 to an ASA (deciding on model). I would prefer to not burn 2 of the 4 GiE interfaces on failover. Currently my PIX 525 uses a serial cable and a 100 Mb interface. The stateful interface is passing about 10 Mb /sec of traffic. The serial cable is rated at 115K. These numbers would suggest 1 GiE interface would be plenty.

Thoughts?

Re: LAN and Stateful Failover Interfaces

adam.sellhorn — Mon, 11 Feb 2008 16:48:21 GMT

You can use one interface for both if you wish. This is in fact how I setup my ASA's. Here is some documentation to help you:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/failover.html#wp1146066

Re: LAN and Stateful Failover Interfaces

jim — Mon, 11 Feb 2008 17:58:42 GMT

Hes right. You can use one port per ASA. And to take that one step further, Cisco doesnt recommend it, but you can use the management 10/100 port for the failover. Ive been running that way for almost two years without any issues.