ASA5520 Statefull Failover - how many physical interfaces do I need?

[bugneac2]

Hi!

Current configration is:

one interface - for inside,

second - for outside,

third - for dmz1(application servers,

and fourth - dmz2(external clients).

I need to implement statefull failover(Active/Standby). From documentation I found that I need additional physical LAN port.

Can I use FastEthernet or I neet SSM-4GE module?

SSM-4GE is expensive and I do not need 4 Giga ports. Are there any solution?

Help me please!

[sebastan_bach]

hi there u need to use a dedicated physical interface for stateful or the lan based failover. u can either use a fast ethernet interface or even a gigbit interface also. set the speed to 100 mbps full dpulex.

see ya .hope this helps.

sebastan

[bugneac2]

You are right.

But I am not sure if fast ethernet can be used for statefull failover. Documentation says that it is for outbound management. Is it general purpose? Can it be used like any other four gigabit ethernet ports?

Is it normal to use fast ethernet port for satefull failover when the other 4 ports work at gigabit speed? Is this a performance problem?