10-06-2010 07:50 PM - edited 03-11-2019 11:51 AM
Hello,
I have a question about transparent mode firewall by ASA5510.
I want to connect 3 circuit as inside and primary / backup outside.
====
interface Ethernet0/0
nameif inside
security-level 100
interface redundant 1
member-interface Ethernet 0/1
member-interface Ethernet 0/2
nameif outside
security-level 0
====
But I could not find the command in several document that forces the active when the interface becomes available (like preempt command).
Can ASA5510 force the active interface?
Best Regards,
Kohsei,
Solved! Go to Solution.
10-06-2010 08:13 PM
Hello,
If I understand you correct, you have connected Ethernet 0/1 to one ISP and Ethernet 0/2 to another ISP. Unfortunately, the Redundant interface configuration is not intended to support such scenario. When the second interface takes over the active role, it will stay active until it goes down. The Redundant interface feature is introduced to increase the reliability of the ASA connections. If my above assumption is correct, I guess the best option would be to use a hub/switch between the ISP devices and the ASA.
Hope this helps.
Regards,
NT
10-06-2010 08:13 PM
Hello,
If I understand you correct, you have connected Ethernet 0/1 to one ISP and Ethernet 0/2 to another ISP. Unfortunately, the Redundant interface configuration is not intended to support such scenario. When the second interface takes over the active role, it will stay active until it goes down. The Redundant interface feature is introduced to increase the reliability of the ASA connections. If my above assumption is correct, I guess the best option would be to use a hub/switch between the ISP devices and the ASA.
Hope this helps.
Regards,
NT
10-06-2010 08:46 PM
Thanks a lot for the quick reply.
Yes, there are two ISPs in outside area, and these CE routers are configured same network segment on LAN side.
I will recommend other design for client.
Thanks again,
Kohsei,
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide