A SERVICE OF

logo

65-7
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 65 Information About High Availability
Failover and Stateful Failover Links
Scenario 3—Recommended
If the ASA data interfaces are connected to more than one set of switches, then a failover interface can
be connected to one of the switches, preferably the switch on the secure side of network, as shown in
Figure 65-5.
Figure 65-5 Connecting with a Secure Switch
Scenario 4—Recommended
The most reliable failover configurations use a redundant interface on the failover interface, as shown in
Figure 65-6 and Figure 65-7.
Figure 65-6 Connecting with Redundant Interfaces
236373
Failover link Failover link
Primary ASA Secondary ASA
outside outside
inside inside
ISL
ISL
Switch 3 Switch 4
Switch 1 Switch 2
236375
Primary ASA
Active redundant
failover link
Active redundant
failover link
Standby redundant
failover link
Standby redundant
failover link
Secondary ASA
outside outside
ISL
Switch 1 Switch 2
inside inside
ISL
Switch 5
Switch 3
Switch 6
Switch 4