![background image](http://html.mh-extra.com/html/cisco/5505-asa-firewall-edition-bundle/5505-asa-firewall-edition-bundle_cli-configuration-manual_18624299.webp)
1-35
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring a Cluster of ASAs
Configuring ASA Clustering
Detailed Steps
Command
Purpose
Step 1
interface
physical_interface
Example:
hostname(config)# interface
gigabitethernet 0/0
Specifies the interface you want to add to the channel group,
where the
physical_interface
ID includes the type, slot, and port
number as
type
slot
/
port
. This first interface in the channel group
determines the type and speed for all other interfaces in the group.
Step 2
channel-group
channel_id
mode
active
[
vss-id
{
1
|
2
}]
Example:
hostname(config-if)# channel-group 1 mode
active
Assigns this interface to an EtherChannel with the
channel_id
between 1 and 48. If the port-channel interface for this channel ID
does not yet exist in the configuration, one will be added
automatically:
interface port-channel
channel_id
Only
active
mode is supported for Spanned EtherChannels.
If you are connecting the ASA to two switches in a VSS or vPC,
then configure the
vss-id
keyword to identify to which switch this
interface is connected (1 or 2). You must also use the
port-channel span-cluster vss-load-balance
command for the
port-channel interface in
. See also the
VSS or vPC” section on page 1-13
for more information.
Step 3
no shutdown
Example:
hostname(config-if)# no shutdown
Enables the interface.
Step 4
(Optional) Add additional interfaces to the
EtherChannel by repeating
through
Example:
hostname(config)# interface
gigabitethernet 0/1
hostname(config-if)# channel-group 1 mode
active
hostname(config-if)# no shutdown
Multiple interfaces in the EtherChannel per unit are useful for
connecting to switches in a VSS or vPC. Keep in mind that an
EtherChannel, can have only 8 active interfaces out of 16
maximum; the remaining 8 interfaces are on standby in case of
link failure. For example, for a cluster of 8 ASAs, you can use a
maximum of 2 interfaces on each ASA, for a total of 16 interfaces
in the EtherChannel.
Step 5
interface port-channel
channel_id
Example:
hostname(config)# interface port-channel 1
Specifies the port-channel interface. This interface was created
automatically when you added an interface to the channel group.
Step 6
port-channel span-cluster
[
vss-load-balance
]
Example:
hostname(config-if)# port-channel
span-cluster
Sets this EtherChannel as a Spanned EtherChannel.
If you are connecting the ASA to two switches in a VSS or vPC,
then you should enable VSS load balancing by using the
vss-load-balance
keyword. This feature ensures that the physical
link connections between the ASAs to the VSS (or vPC) pair are
balanced. You must configure the
vss-id
keyword in the
channel-group
command for each member interface before
enabling load balancing (see
).
Summary of Contents for 5505 - ASA Firewall Edition Bundle
Page 28: ...Glossary GL 24 Cisco ASA Series CLI Configuration Guide ...
Page 61: ...P A R T 1 Getting Started with the ASA ...
Page 62: ......
Page 219: ...P A R T 2 Configuring High Availability and Scalability ...
Page 220: ......
Page 403: ...P A R T 2 Configuring Interfaces ...
Page 404: ......
Page 499: ...P A R T 2 Configuring Basic Settings ...
Page 500: ......
Page 533: ...P A R T 2 Configuring Objects and Access Lists ...
Page 534: ......
Page 601: ...P A R T 2 Configuring IP Routing ...
Page 602: ......
Page 745: ...P A R T 2 Configuring Network Address Translation ...
Page 746: ......
Page 845: ...P A R T 2 Configuring AAA Servers and the Local Database ...
Page 846: ......
Page 981: ...P A R T 2 Configuring Access Control ...
Page 982: ......
Page 1061: ...P A R T 2 Configuring Service Policies Using the Modular Policy Framework ...
Page 1062: ......
Page 1093: ...P A R T 2 Configuring Application Inspection ...
Page 1094: ......
Page 1191: ...P A R T 2 Configuring Unified Communications ...
Page 1192: ......
Page 1333: ...P A R T 2 Configuring Connection Settings and QoS ...
Page 1334: ......
Page 1379: ...P A R T 2 Configuring Advanced Network Protection ...
Page 1380: ......
Page 1475: ...P A R T 2 Configuring Modules ...
Page 1476: ......
Page 1549: ...P A R T 2 Configuring VPN ...
Page 1550: ......
Page 1965: ...P A R T 2 Configuring Logging SNMP and Smart Call Home ...
Page 1966: ......
Page 2059: ...P A R T 2 System Administration ...
Page 2060: ......
Page 2098: ...1 8 Cisco ASA Series CLI Configuration Guide Chapter 1 Troubleshooting Viewing the Coredump ...
Page 2099: ...P A R T 2 Reference ...
Page 2100: ......