PO for LAN failover and stateful failover link?

sandevsingh · ‎08-19-2013

Hi.. We have 2 x ASA 5520s running ver 9.0. We plan to aggregate the 2 interfaces used for LAN failover and stateful failover into a lacp PO. So both the ASAs are connected to each other directly using these 2 interfaces and then we logically make it a one PO. We then assign the PO intface an ip. Is this supported?

Marvin Rhoads · ‎08-19-2013

You can use any unused interface (physical, redundant, or EtherChannel) as the failover link. (Source)

That said, It would be an uncommon implementation. I almost always see them on separate physical interfaces.

Karsten Iwen · ‎08-19-2013

yes, it might be uncommon, but it is recommended to reduce the probablility of split-brain scenarios (where both ASAs could become active in a worst case because of a failed FO-link). So, go for it!

Sent from Cisco Technical Support iPad App

sandevsingh · ‎08-20-2013

Ok thnx folks... So should I use same Ips for LAN fo and stateful fo links or separate?
In other words, PO.10 can be for LAN fo and PO.11 for stateful fo , both different subnets. Or else it can be PO.10 for both sharing the same subnet?

Sent from Cisco Technical Support iPad App