ASA 5525 X Redundant Interface

[nshoe18]

I am fairly new to the 5525X and am trying to figure out if I can just set 2 of the gig ports to be redundant as opposed to having to have 2 5525s. I would like to use say gig0/2 and gig0/3 as redundant in case of a port failure.

[Collin Clark]

You sure can. You'll want to setup an Etherchannel. Here are some directions.

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/interface_start.html#wp1319434

Hope it helps.

[Jon Marshall]

As Collin says you can use an etherchannel. Etherchannel will work if -

1) the ASA interfaces in the etherchannel connect to the same physical switch

or

2) the ASA interfaces in the etherchannel connect to members of a logical switch ie.

a) a pair of switches in a stack such as 3750/3850

b) a pair of 4500/6500 switches running VSS

c) i believe also Nexus switches using a vPC

With 2) you connect the interfaces from the ASA to different physical switches because they are seen as one logical switch.

If none of the above is applicable eg. you have a pair of 4500/6500 but not running VSS and you want to connect the ASA to both switches then ethechannel won't work. Instead you can use the redundant interface feature where one interface is active and the other is a backup and you can then connect each interface to a different physical switch -

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/interface_start.html#wp1062296

Jon