Guidelines And Limitations - Cisco ASA Series Cli Configuration Manual

Software version 9.0 for the services module
Hide thumbs Also See for ASA Series:
Table of Contents

Advertisement

Guidelines and Limitations

Other Prerequisites
We recommend using a terminal server to access all cluster member unit console ports. For initial setup,
and ongoing management (for example, when a unit goes down), a terminal server is useful for remote
management.
Guidelines and Limitations
Context Mode Guidelines
Supported in single and multiple context modes. The mode must match on each member unit.
Firewall Mode Guidelines
Supported in routed and transparent firewall modes. For single mode, the firewall mode must match on
all units.
Failover Guidelines
Failover is not supported with clustering.
IPv6 Guidelines
Supports IPv6. However, the cluster control link is only supported using IPv4.
Model Guidelines
Supported on:
Switch Guidelines
Cisco ASA Series CLI Configuration Guide
1-24
After a slave joins the cluster, its management interface configuration is replaced by the one
replicated from the master unit.
To use jumbo frames on the cluster control link (recommended), you must enable Jumbo Frame
Reservation before you enable clustering. See the
Models)" section on page
See also the
"ASA Hardware and Software Requirements" section on page
ASA 5585-X
For the ASA 5585-X with SSP-10 and SSP-20, which includes two Ten Gigabit Ethernet interfaces,
we recommend using one interface for the cluster control link, and the other for data (you can use
subinterfaces for data). Although this setup does not accommodate redundancy for the cluster
control link, it does satisfy the need to size the cluster control link to match the size of the data
interfaces. See the
"Sizing the Cluster Control Link" section on page 1-7
ASA 5580
On the switch(es) for the cluster control link interfaces, you can optionally enable Spanning Tree
PortFast on the switch ports connected to the ASA to speed up the join process for new units.
When you see slow bundling of a Spanned EtherChannel on the switch, you can enable LACP rate
fast for an Individual interface on the switch.
"Enabling Jumbo Frame Support (Supported
1-33.
Chapter 1
Configuring a Cluster of ASAs
1-3.
for more information.

Advertisement

Table of Contents
loading

Table of Contents