Config of stateful failover on ASA 5520

[mahesh18]

Hi Everyone,

Our client has ASA 5520 config for active/standby.

They are using Lan  Failover link and they have dedicated interface for it.

Rest all other interfaces are used up except the management interface

My question is can i config the stateful link also on Lan  failover interface?

Can we use same physical interface for both Lan and statefull failover?

Or

If i had some free port in both firewalls and if i config stateful failover link on that physical port will it cause any outage in the environment.

Can i use the management interface as statefull failover on both ASA?

Regards

Mahesh

[Marius Gunnerud · Accepted solution]

My question is can i config the stateful link also on Lan  failover interface?

The failover link should be a dedicated interface, be that a dedicated subinterface or physical interface is up to you.  the stateful link can either share the failover link interface or can be configured to use a dedicated interface.
 

Can i use the management interface as statefull failover on both ASA?

Yes, you just need to issue the command no management-only under the mgmt interface.  Keep in mind you will have limited speed on this interface as it only supports 10/100.  So depending on how much stateful connections you need to replicate this could be a bad thing to do.

--

Please remember to select a correct answer and rate

[mahesh18]

Many thanks Maricus.

Regards

MAhesh