Accepted Solutions
Hi Bill,
You can share the interface if you'd like. This is mentioned in the ASA Configuration Guide under the "Stateful Failover Link" section:
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/ha_overview.html#wp1077551
If you are using LAN-based failover, you can share the failover link.
You didn't mention what model ASA you have, but keep in mind that if you have a 5580, the management interface's speed isn't sufficient enough for stateful failover, per the same link above:
Use the following failover interface speed guidelines for the adaptive security appliances:
•
Cisco ASA 5510
–Stateful link speed can be 100 Mbps, even though the data interface can operate at 1 Gigabit due to the CPU speed limitation.
•Cisco ASA 5520/5540/5550
–Stateful link speed should match the fastest data link.
•Cisco ASA 5580
–Use
only non-management 1 Gigabit ports for the stateful link because
management ports have lower performance and cannot meet the performance
requirement for stateful failover.
Hope that helps.
-Mike
Hi Bill,
You can share the interface if you'd like. This is mentioned in the ASA Configuration Guide under the "Stateful Failover Link" section:
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/ha_overview.html#wp1077551
If you are using LAN-based failover, you can share the failover link.
You didn't mention what model ASA you have, but keep in mind that if you have a 5580, the management interface's speed isn't sufficient enough for stateful failover, per the same link above:
Use the following failover interface speed guidelines for the adaptive security appliances:
•Cisco ASA 5510
–Stateful link speed can be 100 Mbps, even though the data interface can operate at 1 Gigabit due to the CPU speed limitation.
•Cisco ASA 5520/5540/5550
–Stateful link speed should match the fastest data link.
•Cisco ASA 5580
–Use
only non-management 1 Gigabit ports for the stateful link because
management ports have lower performance and cannot meet the performance
requirement for stateful failover.
Hope that helps.
-Mike
