![background image](http://html.mh-extra.com/html/cisco/5505-asa-firewall-edition-bundle/5505-asa-firewall-edition-bundle_cli-configuration-manual_18624298.webp)
1-34
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring a Cluster of ASAs
Configuring ASA Clustering
•
For transparent mode, configure the bridge group according to the
.
Guidelines
•
Do not
specify the maximum and minimum links in the EtherChannel—We recommend that you do
not specify the maximum and minimum links in the EtherChannel (The
lacp max-bundle
and
port-channel min-bundle
commands) on either the ASA or the switch. If you need to use them,
note the following:
–
The maximum links set on the ASA is the total number of active ports for the whole cluster. Be
sure the maximum links value configured on the switch is not larger than the ASA value.
–
The minimum links set on the ASA is the minimum active ports to bring up a port-channel
interface
per unit
. On the switch, the minimum links is the minimum links across the cluster, so
this value will not match the ASA value.
•
Do not
change the load-balancing algorithm from the default (see the
port-channel load-balance
command). On the switch, we recommend that you use one of the following algorithms:
source-dest-ip
or
source-dest-ip-port
(see the Nexus OS and IOS
port-channel load-balance
command). Do not use a
vlan
keyword in the load-balance algorithm because it can cause unevenly
distributed traffic to the ASAs in a cluster.
•
The
lacp port-priority
and
lacp system-priority
commands are not used for a Spanned
EtherChannel.
•
When using Spanned EtherChannels, the port-channel interface will not come up until clustering is
fully enabled (see the
“Configuring Spanned EtherChannels” section on page 1-33
). This
requirement prevents traffic from being forwarded to a unit that is not an active unit in the cluster.
•
For detailed EtherChannel guidelines, limitations, and prerequisites, see the
EtherChannel” section on page 1-28
•
See also the
“EtherChannel Guidelines” section on page 1-11
.
Summary of Contents for 5505 - ASA Firewall Edition Bundle
Page 28: ...Glossary GL 24 Cisco ASA Series CLI Configuration Guide ...
Page 61: ...P A R T 1 Getting Started with the ASA ...
Page 62: ......
Page 219: ...P A R T 2 Configuring High Availability and Scalability ...
Page 220: ......
Page 403: ...P A R T 2 Configuring Interfaces ...
Page 404: ......
Page 499: ...P A R T 2 Configuring Basic Settings ...
Page 500: ......
Page 533: ...P A R T 2 Configuring Objects and Access Lists ...
Page 534: ......
Page 601: ...P A R T 2 Configuring IP Routing ...
Page 602: ......
Page 745: ...P A R T 2 Configuring Network Address Translation ...
Page 746: ......
Page 845: ...P A R T 2 Configuring AAA Servers and the Local Database ...
Page 846: ......
Page 981: ...P A R T 2 Configuring Access Control ...
Page 982: ......
Page 1061: ...P A R T 2 Configuring Service Policies Using the Modular Policy Framework ...
Page 1062: ......
Page 1093: ...P A R T 2 Configuring Application Inspection ...
Page 1094: ......
Page 1191: ...P A R T 2 Configuring Unified Communications ...
Page 1192: ......
Page 1333: ...P A R T 2 Configuring Connection Settings and QoS ...
Page 1334: ......
Page 1379: ...P A R T 2 Configuring Advanced Network Protection ...
Page 1380: ......
Page 1475: ...P A R T 2 Configuring Modules ...
Page 1476: ......
Page 1549: ...P A R T 2 Configuring VPN ...
Page 1550: ......
Page 1965: ...P A R T 2 Configuring Logging SNMP and Smart Call Home ...
Page 1966: ......
Page 2059: ...P A R T 2 System Administration ...
Page 2060: ......
Page 2098: ...1 8 Cisco ASA Series CLI Configuration Guide Chapter 1 Troubleshooting Viewing the Coredump ...
Page 2099: ...P A R T 2 Reference ...
Page 2100: ......