Cisco ASA Series Cli Configuration Manual page 289

Chapter 1 Configuring a Cluster of ASAs
•
On the switch, we recommend that you use one of the following EtherChannel load-balancing
algorithms: source-dest-ip or source-dest-ip-port (see the Nexus OS and IOS port-channel
load-balance command). Do not use a vlan keyword in the load-balance algorithm because it can
cause unevenly distributed traffic to the ASAs in a cluster. Do not change the load-balancing
algorithm from the default on the ASA (in the port-channel load-balance command).
•
If you change the load-balancing algorithm of the EtherChannel on the switch, the EtherChannel
interface on the switch temporarily stops forwarding traffic, and the Spanning Tree Protocol restarts.
There will be a delay before traffic starts flowing again.
EtherChannel Guidelines
•
For detailed EtherChannel guidelines, limitations, and prerequisites, see the
EtherChannel" section on page
•
See also the
•
Spanned vs. Device-Local EtherChannel Configuration—Be sure to configure the switch
appropriately for Spanned EtherChannels vs. Device-local EtherChannels.
–
Switch
"EtherChannel Guidelines" section on page
Spanned EtherChannels—For ASA Spanned EtherChannels, which span across all members of
the cluster, the interfaces are combined into a single EtherChannel on the switch. Make sure
each interface is in the same channel group on the switch.
RIGHT
VLAN 101 Spanned Data Ifc
port-ch1 port-ch1
ten0/6
ten0/6
ten0/6
ten0/6
1-28.
1-11.
Switch
VLAN 101
ASA1
port-ch1
ASA2
port-ch2
ASA3
port-ch3
ASA4
port-ch4
Cisco ASA Series CLI Configuration Guide
Guidelines and Limitations
"Configuring an
WRONG
Spanned Data Ifc
ASA1
port-ch1
ten0/6
ASA2
ten0/6
ASA3
ten0/6
ASA4
ten0/6
1-25