Thursday, May 10, 2012

Configure Redundant interface on ASA 5510 and above

Example  ASA redundant interface for Inside and DMZ interfaces. You need configure trunk  ports on switch.
Doesn’t support on ASA 5505. For ASA 5505 need use STP.

# interface Ethernet0/1
# no nameif
# no security-level
# no ip address

# interface Ethernet0/2
# no nameif
# no security-level
# no ip address

# interface Redundant1
# member-interface Ethernet0/1
# member-interface Ethernet0/2
# no nameif
# no security-level
# no ip address

# interface Redundant1.100
# vlan 100
# nameif Inside
# security-level 100
# ip address 10.10.100.1 255.255.255.0

# interface Redundant1.50
# vlan 50
# nameif DMZ
# security-level 50
# ip address 10.10.50.1 255.255.255.0

No comments: