Skip to content
  • There are no suggestions because the search field is empty.

ASA Clustering Configuration example

 
This Document showcases ASA Clustering example on EVE-NG
 
 
1-Jun-17-2024-11-58-15-1807-AM
 
========================
ASA3  Configuration
========================
 
Mode Multi
hostname ASA3
 
interface Ethernet0
channel-group 10 mode active
!
interface Ethernet1
channel-group 10 mode active
!
interface Ethernet2
description Clustering Interface
!
interface Ethernet3
shutdown
!
!            
interface Port-channel10
port-channel span-cluster
!
cluster group ccie
local-unit ASA3
cluster-interface Ethernet2 ip 192.168.203.1 255.255.255.0
priority 1
enable
 
========================
ASA4  Configuration
========================
 
Mode Multi
hostname ASA4
 
interface Ethernet0
channel-group 10 mode active
!
interface Ethernet1
channel-group 10 mode active
!
interface Ethernet2
description Clustering Interface
!
interface Port-channel10
port-channel span-cluster
!
cluster group ccie
local-unit ASA4
cluster-interface Ethernet2 ip 192.168.203.2 255.255.255.0
priority2
enable
 

ASA3# sho cluster info
Cluster ccie: On
    Interface mode: spanned
    This is "ASA3" in state MASTER
        ID        : 0
        Version   : 9.1(5)16
        Serial No.: JMX1203L0NN
        CCL IP    : 192.168.203.1
        CCL MAC   : 5000.0023.0002
        Last join : 22:48:37 UTC Jun 7 2018
        Last leave: N/A
Other members in the cluster:
    Unit "ASA4" in state SLAVE
        ID        : 1
        Version   : 9.1(5)16
        Serial No.: JMX1203L0NN
        CCL IP    : 192.168.203.2
        CCL MAC   : 5000.0024.0002
        Last join : 22:48:39 UTC Jun 7 2018
        Last leave: N/A
 

Switch configuration
 
hostname SW2
interface Port-channel10
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/0
description to ASA3 e0
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 10 mode active
!
interface GigabitEthernet0/1
description to ASA3 e0
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 10 mode active
!
 
interface GigabitEthernet0/3
description ASA4 e0
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 10 mode active
!
interface GigabitEthernet0/4
description ASA4 e1
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 10 mode active
!

SW2#sho etherc summary
Flags:  D - down        P - bundled in port-channel
        I - stand-alone s - suspended
        H - Hot-standby (LACP only)
        R - Layer3      S - Layer2
        U - in use      N - not in use, no aggregation
        f - failed to allocate aggregator
 
        M - not in use, minimum links not met
        m - not in use, port not aggregated due to minimum links not met
        u - unsuitable for bundling
        w - waiting to be aggregated
        d - default port
 
        A - formed by Auto LAG
 
 
Number of channel-groups in use: 1
Number of aggregators:           1
 
Group  Port-channel  Protocol    Ports
------+-------------+-----------+-----------------------------------------------
10     Po10(SU)        LACP      G0/0(P)    G0/1(P)    G0/2(P)   G0/3(P)