Best practices port configuration between Cisco Switch and Cisco ASA on outside connection

[eimis]

Hi,

Any suggestions on best practices between Cisco 2960X and Cisco ASA5512-X for outside connection?

Internet provider->Outside Switch->Cisco ASA outside interface

access mode, portfast, flow-control etc.,?

Thanks!

[Philip D'Ath]

If the ASA is not using VLANs, I would use something like:

interface Gigabit a/b/c
  switchport mode access
  spanning-tree portfast

I would also not put any L3 configuration on the switch facing the Internet.  Use the management port, and plug it in to the internal network.