Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

can ASA5525-X HA RUN failover link on fiber port of the expansion module?

                   the client has 2 firewals , in different floor, they require to do a active/standby HA  . if the length is over 100M, can we order 6x GE spf module for ASA5525-X , and configure the  fiber port to be failover /state port ? any one has done this before ? I assume it will work, just need get a confirmation.


Everyone's tags (3)
VIP Green

can ASA5525-X HA RUN failover link on fiber port of the expan

This should work the same as any other active/standby failover setup.

-- Please remember to rate and select a correct answer
Hall of Fame Super Silver

Re: can ASA5525-X HA RUN failover link on fiber port of the e

Yes. As noted in the configuration guide:

"You can use any unused interface (physical, redundant, or EtherChannel) as the failover link"

The only thing to note for very long distances is down a bit further in that guide:

"For optimum performance when using long distance failover, the latency for the failover link should be less than 10 milliseconds and no more than 250 milliseconds. If latency is more than10 milliseconds, some performance degradation occurs due to retransmission of failover messages."

10 milliseconds is no problem since propagation delay over 50 micron fiber @ 1310 nm is about 5 microseconds/km.