Cisco ASA 5555X Cluster on enhanced vPC with Nexus 5672UP and 2348TQ

[Michael Antonakis]

Hello,

We have a pair of ASA 5555X firewalls, and we want to set them up in a cluster. We have done the same on our HQ site where we have cabled them on a pair of 6807-XL switches in VSS. We would like to do the same on a new site, but the switches we have there are 2 Nexus 5672UP with two Nexus 2348TQ FEXs. We have setup the enhance vPC configuration on Nexus and cabled the ASAs on the FEXs, but the port-channels show down (SD). Is such a setup possible?

Thank you,

Michael.

[Peter Koltl]

ASA cluster or failover pair?

LACP or static port channel?

[Michael Antonakis]

Hello Peter,

To answer your questions:

ASA cluster

LACP

I've managed to do it using this guide:

https://communities.cisco.com/docs/DOC-35904