Tuesday, November 28, 2017

Quick sanity check: ASA redundant interface configuration

Hey all, just a quick sanity check to make sure I understand the concept of redundant interfaces on ASAs. I've got a 5525-X connecting to two separate switches with the physical NICs a member of redundant1. The redundant interface is assigned an IP and if switch1 dies, then the ASA will continue to stay up thanks to switch2 kicking in. Is this an okay setup? My only concern is STP but if there is something else wrong, let me know. I have it all set up as follows:

SWITCH1:

interface Ethernet1/46

description ASA1_gig0/1

switchport

switchport access vlan 255

no shutdown

SWITCH2:

interface Ethernet1/46

description ASA1_gig0/2

switchport

switchport access vlan 255

no shutdown

ASA1:

interface Redundant1

member-interface GigabitEthernet0/1

member-interface GigabitEthernet0/2

nameif inside

security-level 100

ip address 192.168.255.1 255.255.255.0



No comments:

Post a Comment