Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

PO for LAN failover and stateful failover link?

Hi.. We have 2 x ASA 5520s running ver 9.0. We plan to aggregate the 2 interfaces used for LAN failover and stateful failover into a lacp PO. So both the ASAs are connected to each other directly using these 2 interfaces and then we logically make it a one PO. We then assign the PO intface an ip. Is this supported?

3 REPLIES
Hall of Fame Super Silver

PO for LAN failover and stateful failover link?

You can use any unused interface (physical, redundant, or EtherChannel) as the failover link. (Source)

That said, It would be an uncommon implementation. I almost always see them on separate physical interfaces.

VIP Purple

Re: PO for LAN failover and stateful failover link?

yes, it might be uncommon, but it is recommended to reduce the probablility of split-brain scenarios (where both ASAs could become active in a worst case because of a failed FO-link). So, go for it!


Sent from Cisco Technical Support iPad App

Community Member

Re: PO for LAN failover and stateful failover link?

Ok thnx folks... So should I use same Ips for LAN fo and stateful fo links or separate?
In other words, PO.10 can be for LAN fo and PO.11 for stateful fo , both different subnets. Or else it can be PO.10 for both sharing the same subnet?


Sent from Cisco Technical Support iPad App

193
Views
0
Helpful
3
Replies
CreatePlease to create content