Solved: Connecting an ASA to 2 internal Level 3 switches

David Tamburin · ‎07-29-2010

We have an ASA and two internal switches. The switches are set up with HSRP for redundancy.

I was wondering if/how it is possible to physically connect both of these switches to the one ASA which is connected to our internet connection.

This way if one of the switches fails we would still have internet.

Is this possible? How would you do it?

Thank you,

Davidt

manish arora · ‎07-29-2010

You can also look into 'redundant interface configuration' on the asa side , if you are not planning to buy a failover asa. another option could be having the single asa configured in to multiple context.

thanks

Manish

View solution in original post

waltermavely · ‎07-29-2010

If u have free physical interface in your ASA you can configure Redundant interface

For example let say you have two interface

fa0/1 and fa0/2

interface FastEthernet0/1
no nameif
no security-level
no ip address

interface FastEthernet0/2
no nameif
no security-level
no ip address

interface Redundant1
member-interface FastEthernet0/1
member-interface FastEthernet0/2
nameif inside
security-level 100
ip address x.x.x.x x.x.x.x

By default, the active interface is the first interface listed in the configuration

If you shut down the active interface, then the standby interface becomes active . it is able to change forcefully also

FastEthernet0/1 you can connect to first switch and FastEthernet0/2 you can connect second switch

But advisable solution is that configuration the ASA failover pair this will solve hardware failure issue also

hope this is help full for you

Regard