Redundant Interface Configuration on ASA

[Saurabh Srivastava]

Hi All,

I am testing the redundant interface config in GNS3 and below are the configuration which i have done-

ASA1(config)#interface Ethernet0/1

no nameif

no security-level

no ip address

!

ASA1(config)#interface Ethernet0/2

no nameif

no security-level

no ip address

ASA1(config)# sh run | beg Redu

interface Redundant1

member-interface Ethernet0/1

member-interface Ethernet0/2

nameif inside

security-level 100

ip address 10.0.0.1 255.0.0.0

every thing is working fine when redundant interface is e0/1, but whatever i tried to make another interface(E0/2) as active, either by manually shutting down the int E0/1 OR from putting command "redundant-interface redundant 1 active-member ethernet 0/2" on ASA, connctivity between My PC and ASA drop out. below are the output after making E0/2 as active.

ASA1(config)# sh int red1

Interface Redundant1 "inside", is up, line protocol is up

  Hardware is linaeth, BW 1000 Mbps, DLY 10 usec

        Auto-Duplex(Full-duplex), (100 Mbps)

        Media-type configured as RJ45 connector

       MAC address 00ab.cd92.5201, MTU 1500

        IP address 10.0.0.1, subnet mask 255.0.0.0

        0 packets input, 34804 bytes, 0 no buffer

        Received 51 broadcasts, 0 runts, 0 giants

        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

        0 L2 decode drops

        0 packets output, 1090 bytes, 0 underruns

        0 output errors, 0 collisions, 0 interface resets

        0 babbles, 0 late collisions, 0 deferred

        0 lost carrier, 0 no carrier

        input queue (curr/max packets): hardware (256/256) software (0/6)

        output queue (curr/max packets): hardware (0/0) software (0/2)

  Traffic Statistics for "inside":

        102 packets input, 6926 bytes

        25 packets output, 1116 bytes

        79 packets dropped

      1 minute input rate 0 pkts/sec,  0 bytes/sec

      1 minute output rate 0 pkts/sec,  0 bytes/sec

      1 minute drop rate, 0 pkts/sec

      5 minute input rate 0 pkts/sec,  13 bytes/sec

      5 minute output rate 0 pkts/sec,  3 bytes/sec

      5 minute drop rate, 0 pkts/sec

  Redundancy Information:

        Member Ethernet0/2(Active), Ethernet0/1

        Last switchover at 00:02:41 UTC Nov 30 1999

I am trying to debug the thing by Wireshark and found that E0/2 is giving the response with MAC as E0/1 interface(Which is correct and as per cisco documnet). I am attaching the connectivity diagram and output of wireshark and ARP table from My PC and ASA.

Please any one correct me if i am wrong in somewhere...

Regards,
Saurabh       

[Saurabh Srivastava]

Any one please reply.

Regards,
Saurabh

[Julio Carvajal]

Hello Saurabh,

So this is a GNS enviroment. Hmmmm.....

I can see that you already understand the concept, you know how to configure it and troubleshoot it,

Everything is properly setup so it does not make sense the behavior we are seeing.

What happens if you manually set a MAC address ( one created by you ) on the ASA for the redundant interface?

flush the ARP table of all of the devices and let me know, we are testing here as this is a virtual enviroment, no one will get harm

For Networking Posts check my blog at http://laguiadelnetworking.com/

Cheers,

Julio Carvajal Segura

[Saurabh Srivastava]

Thanks Julio for reply... I had already tried by clearing the ARP table for PC and firewall but fail to reach via seconnd interface..This might be GNS issue.

Regards,
Saurabh

[Julio Carvajal]

Hello Saurabh,

That's the thing as we are not using a live enviroment we could be hitting those kind of odd issues with GNS,

I can ensure you that the configuration is good,

For Networking Posts check my blog at http://laguiadelnetworking.com/

Cheers,

Julio Carvajal Segura

[johnlloyd_13]

hi,

could you try to simulate this on a 5520 in GNS3?

also, try configuring redundant interface pair using ASDM.

a PC reboot makes it work sometimes.