Cisco ASA Series User Manual

1-61
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring a Cluster of ASAs
Configuration Examples for ASA Clustering
Traffic Segregation
You may prefer physical separation of traffic between the inside and outside network.
As shown in the diagram above, there is one Spanned EtherChannel on the left side that connects to the
inside switch, and the other on the right side to outside switch. You can also create VLAN subinterfaces
on each EtherChannel if desired.
Interface Mode on Each Unit
cluster interface-mode spanned force
ASA1 Master Bootstrap Configuration
interface tengigabitethernet 0/6
channel-group 1 mode on
no shutdown
interface tengigabitethernet 0/7
channel-group 1 mode on
no shutdown
interface port-channel 1
description CCL
cluster group cluster1
local-unit asa1
cluster-interface port-channel1 ip 192.168.1.1 255.255.255.0
priority 1
key chuntheunavoidable
enable noconfirm
ASA1
333220
ten0/6
ten0/7
ten0/8
man0/0
ten0/9
ASA2
ten0/6
ten0/7
ten0/8
man0/0
ten0/9
ASA3
ten0/6
ten0/7
ten0/8
ten0/9
Switch
port-ch1 port-ch2 port-ch3
Cluster Control Link
port-ch1
192.168.1.1, .2, and .3
port-ch4 port-ch1
port-ch1 port-ch1
port-ch2 Spanned
inside
10.10.10.5/24, 2001:DB8:1::5/64
MAC: 000C.F142.4CDE
Switch
man0/0
port-ch3 Spanned
outside
209.165.201.1/27, 2001:DB8:2::8/64
MAC: 000C.F142.5CDE
management
10.1.1.1 (Pool: .2-.9),
2001:DB8::1002/64 (Pool: 8 IPs)

Cisco ASA Series Specifications

General

Brand	Cisco
Model	ASA Series
Category	Network Hardware
Language	English