ASA Clustering Configuration example
This Document showcases ASA Clustering example on EVE-NG
========================
ASA3 Configuration
========================
Mode Multi
hostname ASA3
interface Ethernet0
channel-group 10 mode active
!
interface Ethernet1
channel-group 10 mode active
!
interface Ethernet2
description Clustering Interface
!
interface Ethernet3
shutdown
!
!
interface Port-channel10
port-channel span-cluster
!
cluster group ccie
local-unit ASA3
cluster-interface Ethernet2 ip 192.168.203.1 255.255.255.0
priority 1
enable
========================
ASA4 Configuration
========================
Mode Multi
hostname ASA4
interface Ethernet0
channel-group 10 mode active
!
interface Ethernet1
channel-group 10 mode active
!
interface Ethernet2
description Clustering Interface
!
interface Port-channel10
port-channel span-cluster
!
cluster group ccie
local-unit ASA4
cluster-interface Ethernet2 ip 192.168.203.2 255.255.255.0
priority2
enable
ASA3# sho cluster info
Cluster ccie: On
Interface mode: spanned
This is "ASA3" in state MASTER
ID : 0
Version : 9.1(5)16
Serial No.: JMX1203L0NN
CCL IP : 192.168.203.1
CCL MAC : 5000.0023.0002
Last join : 22:48:37 UTC Jun 7 2018
Last leave: N/A
Other members in the cluster:
Unit "ASA4" in state SLAVE
ID : 1
Version : 9.1(5)16
Serial No.: JMX1203L0NN
CCL IP : 192.168.203.2
CCL MAC : 5000.0024.0002
Last join : 22:48:39 UTC Jun 7 2018
Last leave: N/A
Switch configuration
hostname SW2
interface Port-channel10
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/0
description to ASA3 e0
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 10 mode active
!
interface GigabitEthernet0/1
description to ASA3 e0
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 10 mode active
!
interface GigabitEthernet0/3
description ASA4 e0
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 10 mode active
!
interface GigabitEthernet0/4
description ASA4 e1
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 10 mode active
!
SW2#sho etherc summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use N - not in use, no aggregation
f - failed to allocate aggregator
M - not in use, minimum links not met
m - not in use, port not aggregated due to minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
A - formed by Auto LAG
Number of channel-groups in use: 1
Number of aggregators: 1
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
10 Po10(SU) LACP G0/0(P) G0/1(P) G0/2(P) G0/3(P)