Reduntat interface 5505 (no spanning-tree, so I gues protected port should do?)

mile.ljepojevic · ‎06-13-2011

Hi,

here is the thing.

I have asa 5505 that should be connected to two core switches on the inside, and two edge sw on the outside.

Cores are interconnected.

Edge sw are inteconnected.

Since ASA 5505 do not support SPT, I guess the only way not to close the loop is to configure protected on all ports.

Did anyone tried that, and what are your thoughts?

Thanks.

mile.ljepojevic · ‎06-13-2011

I need to clarify myself...

If I configure protected on all ASA ports that I will use, it will deny communication between 2 ports in the same VLAN.

So, if there is broadcast packet arrived in interf fa 0/1, it will not be forwarded through fa 0/2 (for example, that two ports are in the same VLAN connected to my core switches).