Showing results for 
Search instead for 
Did you mean: 

Need advice on connecting a failover pair of ASA's to a 3750x stack

Level 1
Level 1


I am designing to connect a failover pair of ASA's (active/standby) to a 3750x stack (L3 routing) of switches.

The 3750x stack will be the connection to the Internet.

Can I use this as the potential solution :

Attached is my proposed layout of  connectivity. The ASA's will be the gateway for all server traffic (  DMZ, App, DB, etc..), and the 3750's will server as L2 switches for all  server traffic, but will be the routers for Internet bound traffic. I  will be using a L3 SVI for the VLAN interface facing the Internet.

Any suggestions would be greatly appreciated.

1 Reply 1

Level 7
Level 7

Your design looks reasonable to me. It's important to connect devices to different members of the stack like you did.

By looking at your diagram I'm not sure if you meant that each ASA has its own Portchannel or not. If you run active/standby scenario I believe you need one Portchannel per ASA.

Daniel Dib
CCIE #37149

Daniel Dib
CCIE #37149
CCDE #20160011

Please rate helpful posts.
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card