ASA5510 - LACP in Transparent Mode

[jamoiholland]

Hello all,

I understand that in transparent mode an ASA5510 would only be able to have two interfaces, inside and outside.

My question is could one of those logical interfaces be an LACP'd interface, made up of two physical interfaces. Topology below.

I understand that the router and ASA5510 are SPOF here, so it is a bit of a moot point, but we're connecting already existing infrastructures together!

|-------–---|      |---------|        

| Switch 1  |------|         |        

|-----------|      | ASA5510 |         |----------|

     | |           | (transp |---------|  Router  |

|-------–---|      |  mode)  |         |----------|

| Switch 2  |------|         |        

|-----------|      |---------|        

[Andrew Phirsov]

Surely there might be an etherchannel interface as one of the bridge-group interfaces when in transparent mode.

[jamoiholland]

That's my question Andrew, unfortunately I need a concrete answer as opposed to "surely there might"

[jocamare · Accepted solution]

Configuring Cisco ASA Service Appliance in Transparent Mode with vPC
Since Release 8.4, Cisco ASA 5500 Series Adaptive Security Appliance solution supports Link Aggregation Control
Protocol (LACP). 
ASA port-channel contains up to eight active member ports.
Supported LACP modes are: ACTIVE, PASSIVE, and ON (ON means manual ports bundling i.e not using dynamic
port-channeling control protocol).
ASA can be configured in transparent or routed mode. Both modes are supported when integrating ASA with Cisco
Nexus 7000 Series vPC.

http://www.cisco.com/en/US/docs/switches/datacenter/sw/design/vpc_design/vpc_best_practices_design_guide.pdf

Page 87-88

[jamoiholland]

Thanks jocamare!