08-09-2013 10:11 AM - edited 03-11-2019 07:24 PM
the client has 2 firewals , in different floor, they require to do a active/standby HA . if the length is over 100M, can we order 6x GE spf module for ASA5525-X , and configure the fiber port to be failover /state port ? any one has done this before ? I assume it will work, just need get a confirmation.
Thankls
08-16-2013 12:45 PM
This should work the same as any other active/standby failover setup.
08-16-2013 01:33 PM
Yes. As noted in the configuration guide:
"You can use any unused interface (physical, redundant, or EtherChannel) as the failover link"
The only thing to note for very long distances is down a bit further in that guide:
"For optimum performance when using long distance failover, the latency for the failover link should be less than 10 milliseconds and no more than 250 milliseconds. If latency is more than10 milliseconds, some performance degradation occurs due to retransmission of failover messages."
10 milliseconds is no problem since propagation delay over 50 micron fiber @ 1310 nm is about 5 microseconds/km.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide