ASA Redundant Interfaces

[Jim Kerr]

Hi All

I have a Cisco ASA 5550 that already has 4 physical interfaces used which includes the use of 8 redundant interfaces under redudant1.

I am planning on using some of the spare physical interfaces shortly but wanted to use redundant interfaces also.

I've read on the Cisco pages that the ASA can only have a maximum of 8 redundant interfaces.

My question is on my ASA can I create another Redundant Interface2 and have another 8 spare redundant interfaces to use ? or does it mean that because the ASA already has 8 Redundant interfaces set up that I cannot do this ?

thanks

[Karsten Iwen]

I don't really understand what you are having at the moment as for example a redundant interface can't have eight members.

This is how it works:

• You can have up to eight logical redundant interfaces. These interfaces hold your nameif, sec-level and ip-address.
• Each logical redundant interface has two physical member-interfaces. These member interfaces are exclusivly bound to the logical redundant interface that uses them.
• With an 5550 you can have a maximum of four redundant interfaces with two member interafces each. All eight interfaces of the 5550 are used that way.
• If you connect these interfaces to you own infrastructure, using Etherchannel interfaces instead of redundant interfaces could be a better solution.