Cisco ASA Series Cli Configuration Manual page 266

Information About ASA Clustering
•
•
How the ASA Cluster Fits into Your Network
The cluster consists of multiple ASAs acting as a single unit. (See the
Clustering" section on page 1-23
ASAs need the following infrastructure:
•
•
When you place the cluster in your network, the upstream and downstream routers need to be able to
load-balance the data coming to and from the cluster using one of the following methods:
•
•
•
Performance Scaling Factor
When you combine multiple units into a cluster, you can expect a performance of approximately:
•
•
•
For example, for throughput, the ASA 5585-X with SSP-40 can handle approximately 10 Gbps of real
world firewall traffic when running alone. For a cluster of 8 units, the maximum combined throughput
will be approximately 70% of 80 Gbps (8 units x 10 Gbps): 56 Gbps.
Cluster Members
•
•
•
•
Cisco ASA Series CLI Configuration Guide
1-2
How the ASA Cluster Manages Connections, page 1-15
ASA Features and Clustering, page 1-17
Isolated, high-speed backplane network for intra-cluster communication, known as the cluster
control link. See the "Cluster Control Link" section on page
Management access to each ASA for configuration and monitoring. See the
Management" section on page
Spanned EtherChannel (Recommended)—Interfaces on multiple members of the cluster are
grouped into a single EtherChannel; the EtherChannel performs load balancing between units. See
the "Spanned EtherChannel (Recommended)" section on page
Policy-Based Routing (Routed firewall mode only)—The upstream and downstream routers perform
load balancing between units using route maps and ACLs. See the
Firewall Mode Only)" section on page
Equal-Cost Multi-Path Routing (Routed firewall mode only)—The upstream and downstream
routers perform load balancing between units using equal cost static or dynamic routes. See the
"Equal-Cost Multi-Path Routing (Routed Firewall Mode Only)" section on page
70% of the combined throughput
60% of maximum connections
50% of connections per second
ASA Hardware and Software Requirements, page 1-3
Bootstrap Configuration, page 1-3
Master and Slave Unit Roles, page 1-3
Master Unit Election, page 1-3
for the number of units supported per model). To act as a cluster, the
1-10.
1-14.
Chapter 1 Configuring a Cluster of ASAs
"Licensing Requirements for ASA
1-6.
"ASA Cluster
1-12.
"Policy-Based Routing (Routed
1-15.