Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA 5525-X Clustering and 3750-x stack

Hi support community

i'm making a design which has two ASA 5525-X in cluster connected to a stack of 3750-x by a port-channel. the topology is attached.

I found in the documentation the following statement:

"The ASA does not support connecting an  EtherChannel to a switch stack. If the ASA EtherChannel is connected  cross stack, and if the Master switch is powered down, then the  EtherChannel connected to the remaining switch will not come up. "

however it's no clear for me if my design will work as each ASA will connect to only one Switch. So is the design correct?

thanks in advance 

best regards,

Everyone's tags (5)
6 REPLIES
New Member

Hi,Nobody from Cisco replies

Hi,

Nobody from Cisco replies?

Documentation here :

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/ha_cluster.html#pgfId-1574185

 

Table 8-2 External Hardware and Software Dependencies for ASA Clustering

Catalyst 3750-X, IOS 15.0(2) and later

 

Please make a suggestion, because not everyone is having pair of C6500 or Nexus 5000/7000.

 

Thank you.

 

Bronze

Hi Pavel, do you have any

Hi Pavel, do you have any update? I'm trying to do the same configuration, but as you said, no everyone have a Nexus or C6500.

Thanks.

David

New Member

Hello David, Right now, I

Hello David,

 

Right now, I have no news. But I hope during month I will be able do some labs to confirm behavior of solution.

 

Pavel

New Member

Hi everyone!Has anyone solved

Hi everyone!
Has anyone solved this problem?
Please share information.

New Member

Hi,From my point of view it

Hi,

From my point of view it doesn't work (mean clustering with 3750-x) switches in a way I would expect.

I have made tests with 3850 and there are few problems (cluster with cross-switch etherchannel):

- with persistent mac address of stack, when master is only rebooted (can happen), then (after exMaster boot) all traffic stops (you have 2 devices with same mac address). Then you have to reboot whole stack (or just slave).

- if you allow convergence of network (non persistent mac add of stack), then you have outage which cluster of ASA will not survive and you have to manually recover cluster.

 

One way or another, there will be outage.

And what bothers me most is, you have to something to have 100% working solution (as before outage).

 

I am going to continue with Active/Standby scenario (even with half of power useless). But it will be most bullet-proof solution I can get (with this hardware).

 

HTH

 

Pavel

New Member

Павел большое спасибо! Thank

Павел большое спасибо! 

Thank's Pavel! 

711
Views
0
Helpful
6
Replies
CreatePlease login to create content