Firepower 4110 Failover/State Failover Link Speed

[dm2020]

Hi All,

I am currently implementing a pair of Cisco 4110s running ASA code in active/standby HA. Each 4110 will be connected to the LAN using 2 x 10GbE interfaces in a port-channel. 

I am going to connect a dedicated failover and state-failover link between the 4110s, however I'm not sure if 1GbE will adequate for these or if they they should (for the state link anyway) be at least 10GbE to match the data links. 

Can anyone offer any advice on this please?

[nspasov · Accepted solution]

You can find this info and other requirements in the ASA configuration guides:

https://www.cisco.com/c/en/us/support/security/asa-5500-series-next-generation-firewalls/products-installation-and-configuration-guides-list.html

For instance, here is what the latest (9.13.x) guide says:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa913/configuration/general/asa-913-general-config/ha-failover.html

Cisco recommends that the bandwidth of the stateful failover link should at least match the bandwidth of the data interfaces.

I hope this helps!

Thank you for rating helpful posts!