ASA 5585-X IPS Management 0 & 1 for redundancy

Soleymani · ‎10-20-2015

Hello

I try to test redundancy management interface of module 1 IPS

8	Management 0/1 (core SSP in slot 0) Management 1/1 (add-on module in slot 1) (GigabitEthernet RJ45)
9	Management 0/0 (SSP in slot 0) Management 1/0 (add-on module in slot 1) (GigabitEthernet RJ45)

I connect (9) m0/0 and m1/0 to separate switch (same Lan) but only m0/0 is work and m1/0 not work.

I can not find setting for m1/0, is it real backup link for m0/0 or not?

show interface say m0/1 , document tell m1/0 ! witch one is correct?

how can I have redundancy for both of them?

Thanks

Armen

ASA01SSP20# show interfaces
Interface Statistics
   Total Packets Received = 203349
   Total Bytes Received = 26028672
   Missed Packet Percentage = 0
MAC statistics from interface Management0/0
   Interface function = Command-control interface
   Description =
   Media Type = TX
   Default Vlan = 0
   Link Status = Up
   Link Speed = Auto_1000
   Link Duplex = Auto_Full
   Total Packets Received = 23146
   Total Bytes Received = 1448143
   Total Multicast Packets Received = 0
   Total Receive Errors = 0
   Total Receive FIFO Overruns = 0
   Total Packets Transmitted = 1653
   Total Bytes Transmitted = 75318
   Total Transmit Errors = 0
   Total Transmit FIFO Overruns = 0
MAC statistics from interface PortChannel0/0
   Interface function = Sensing interface
   Description =
   Media Type = backplane
   Default Vlan = 0
   InlineMode = Unpaired
   Pair Status = N/A
   Hardware Bypass Capable = No
   Hardware Bypass Paired = N/A
   Link Status = Up
   Admin Enabled Status = Enabled
   Link Speed = Auto_10000
   Link Duplex = Auto_Full
   Missed Packet Percentage = 0
   Total Packets Received = 203349
   Total Bytes Received = 26028672
   Total Multicast Packets Received = 0
   Total Broadcast Packets Received = 0
   Total Jumbo Packets Received = 0
   Total Undersize Packets Received = 0
   Total Receive Errors = 0
   Total Receive FIFO Overruns = 0
   Total Packets Transmitted = 203349
   Total Bytes Transmitted = 26028672
   Total Multicast Packets Transmitted = 0
   Total Broadcast Packets Transmitted = 0
   Total Jumbo Packets Transmitted = 0
   Total Undersize Packets Transmitted = 0
   Total Transmit Errors = 0
   Total Transmit FIFO Overruns = 0
MAC statistics from interface Management0/1
   Interface function = Reserved for future use

Name: "module 0", DESCR: "ASA 5585-X Security Services Processor-20 with 8GE"
PID: ASA5585-SSP-20 , VID: V04 , SN:

Name: "module 1", DESCR: "ASA 5585-X IPS Security Services Processor-20 with 8GE"
PID: ASA5585-SSP-IPS20 , VID: V04 , SN:

Name: "Chassis", DESCR: "ASA 5585-X"
PID: ASA5585 , VID: V02 , SN:

ragusain · ‎05-04-2018

Hello :)

Please refer below lines from link

https://www.cisco.com/c/en/us/td/docs/security/ips/7-1/configuration/guide/cli/cliguide71/cli_ssp.pdf

The ASA 5585-X IPS SSP has four types of ports (console, management, GigabitEthernet, and 10GE). The console and management ports (on the right front panel of the ASA 5585-X IPS SSP) are configured and controlled by IPS software. The GigabitEthernet and 10GE ports (on the left front panel of the ASA 5585-X IPS SSP) are configured and controlled by ASA software rather than IPS software. However, when you reset or shut down the ASA 5585-X IPS SSP, the GigabitEthernet and 10GE ports will also link down. You should reset or shut down the ASA 5585-X IPS SSP during scheduled maintenance windows to minimize the effect of the link down on these ports.

Hope this help you understand .

thanks and regards

Raman Singh Gusain

Engineer Cisco TAC