cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
222
Views
0
Helpful
1
Replies

ASA Mana0/0 Interface for Rescue

Daniel Smith
Level 1
Level 1

We have been using the management0/0 interface for the failover process with success. I have a co-worker who claims this is not recommended. Has anyone got decisive information either for or against this practice?

1 Reply 1

Collin Clark
VIP Alumni
VIP Alumni

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml

Cisco recommends that you do not use the management interface for failover, especially for stateful failover in which the security appliance constantly sends the connection information from one security appliance to the other. The interface for failover must be at least of the same capacity as the interfaces that pass regular traffic, and while the interfaces on the ASA 5540 are gigabit, the management interface is FastEthernet only. The management interface is designed for management traffic only and is specified as management0/0.