02-11-2008 08:30 AM - edited 03-11-2019 05:01 AM
Does anyone have any experience with using the same interface for LAN and stateful failover? Cisco documentation suggests using two interfaces. I am about to convert from a PIX 525 to an ASA (deciding on model). I would prefer to not burn 2 of the 4 GiE interfaces on failover. Currently my PIX 525 uses a serial cable and a 100 Mb interface. The stateful interface is passing about 10 Mb /sec of traffic. The serial cable is rated at 115K. These numbers would suggest 1 GiE interface would be plenty.
Thoughts?
Solved! Go to Solution.
02-11-2008 08:48 AM
You can use one interface for both if you wish. This is in fact how I setup my ASA's. Here is some documentation to help you:
http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/failover.html#wp1146066
02-11-2008 08:48 AM
You can use one interface for both if you wish. This is in fact how I setup my ASA's. Here is some documentation to help you:
http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/failover.html#wp1146066
02-11-2008 09:58 AM
Hes right. You can use one port per ASA. And to take that one step further, Cisco doesnt recommend it, but you can use the management 10/100 port for the failover. Ive been running that way for almost two years without any issues.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide