cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1211
Views
0
Helpful
2
Replies

can ASA5525-X HA RUN failover link on fiber port of the expansion module?

yao yu jiang
Level 1
Level 1

                   the client has 2 firewals , in different floor, they require to do a active/standby HA  . if the length is over 100M, can we order 6x GE spf module for ASA5525-X , and configure the  fiber port to be failover /state port ? any one has done this before ? I assume it will work, just need get a confirmation.

Thankls

2 Replies 2

This should work the same as any other active/standby failover setup.

--
Please remember to select a correct answer and rate helpful posts

Marvin Rhoads
Hall of Fame
Hall of Fame

Yes. As noted in the configuration guide:

"You can use any unused interface (physical, redundant, or EtherChannel) as the failover link"

The only thing to note for very long distances is down a bit further in that guide:

"For optimum performance when using long distance failover, the latency for the failover link should be less than 10 milliseconds and no more than 250 milliseconds. If latency is more than10 milliseconds, some performance degradation occurs due to retransmission of failover messages."

10 milliseconds is no problem since propagation delay over 50 micron fiber @ 1310 nm is about 5 microseconds/km.

Review Cisco Networking products for a $25 gift card