ASA 5585 port-channels

[Colin Higgins]

I want to create a port-channel with 2 10Gbs interfaces on 2 ASA 5585 firewalls, and set them up in a failover pair.

In order to do this, do I simply put two 10Gbs interfaces into a channel and then configure the IP addressing and failover address on the logical port-channel interface? (aka interface po1).

Any limitations with this?

[Saqib Raza · Accepted solution]

Yes, that is exactly what you do..

1. Create portchannel on switch and ASA
2. Trunk the vlan on switch side
3. Create logical interfaces on ASA