Hi pkampana / halijenn / all
I want to know if i configure the management interface of asa 5510 as failover link , the cpu utilization will go up or not . As per the thread below , the more connection replication, the more traffic for the failover link, the more load for the failover link.However the conenction replication happens via stateful failover link , not via the failover link , please correct me if i am wrong . hence please let me know if cpu utilzation is of a much concern over here or not .
Also i want to know if the management interface is used as failover link , will i be able to manage the Firewall with those IPs configured for faillover ?
The CPU utilization will not be of concern. However, from your statement "(consider heavy traffic is traversing across ASA and lot of connection entries are being made)", I assume that you were talking about the failover stateful link. To answer that particular question, yes, you would need to use the fastest speed interface for failover stateful link.
There are 2 interfaces that are required for failover:
1) Failover link - this is to check the failover status on each device - keepalive
2) Stateful failover link - this is to replicate all the connection and xlate table
Sometimes people use 1 interface for both failover and stateful failover link. If you only use 1 interface, then you would need to use the fastest interface (because of the state replications).
If you are using 2 interfaces for each function, ie: 1 for failover link, and the other for stateful failover link, then only the stateful failover link needs to be the fastest interface. With the failover link, you can use the management interface which is a 10/100 interface.
If you use the management interface for failover link, I would recommend that you do not use it for management as well. As there is a possibility that a failover keepalive might be lost when you are managing the firewall, especially if you backup a config for example, or transfering image for an upgrade, etc.
Hope that answers your question.