Licensing Requirements For Asa Clustering; Prerequisites For Asa Clustering - Cisco ASA Series Cli Configuration Manual

Chapter 1 Configuring a Cluster of ASAs
FTP
•
•
Cisco TrustSec
Only the master unit learns security group tag (SGT) information. The master unit then populates the
SGT to slaves, and slaves can make a match decision for SGT based on the security policy.

Licensing Requirements for ASA Clustering

Model License Requirement
ASA 5580, Cluster License, supports up to 8 units.
ASA 5585-X
A Cluster license is required on each unit. For other feature licenses, cluster units do not require the
same license on each unit. If you have feature licenses on multiple units, they combine into a single
running ASA cluster license.
Note
All other models No support.

Prerequisites for ASA Clustering

Switch Prerequisites
•
•
Table 1-2
External Hardware
Nexus 7000
Catalyst 6500 with Supervisor 32,
720, and 720-10GE
ASA Prerequisites
•
If FTP data channel and control channel flows are owned by different cluster members, the data
channel owner will periodically send idle timeout updates to the control channel owner and update
the idle timeout value. However, if the control flow owner is reloaded, and the control flow is
re-hosted, the parent/child flow relationship will not longer be maintained; the control flow idle
timeout will not be updated.
If you use AAA for FTP access, then the control channel flow is centralized on the master unit.
Each unit must have the same encryption license.
Be sure to complete the switch configuration before you configure clustering on the ASAs.
Table 1-2 lists supported external hardware and software to interoperate with ASA clustering.
External Hardware and Software Dependencies for ASA Clustering
Provide each unit with a unique IP address before you join them to the management network.
–
See Chapter 1, "Getting Started,"
the management IP address.
–
Except for the IP address used by the master unit (typically the first unit you add to the cluster),
these management IP addresses are for temporary use only.
External Software
NXOS 5.2(5)
IOS 12.2(33)SXI7, SXI8, and SXI9 9.0(1) and later.
for more information about connecting to the ASA and setting
Cisco ASA Series CLI Configuration Guide
Licensing Requirements for ASA Clustering
ASA Version
9.0(1) and later.
1-23