Cisco ASA Series Cli Configuration Manual page 269

Chapter 1 Configuring a Cluster of ASAs
port-channel 5
•
Individual interfaces (Routed firewall mode only)
Individual interfaces are normal routed interfaces, each with their own Local IP address. Because
interface configuration must be configured only on the master unit, the interface configuration lets
you set a pool of IP addresses to be used for a given interface on the cluster members, including one
for the master. The Main cluster IP address is a fixed address for the cluster that always belongs to
the current master unit. The Main cluster IP address is a secondary IP address for the master unit;
the Local IP address is always the primary address for routing. The Main cluster IP address provides
consistent management access to an address; when a master unit changes, the Main cluster IP
address moves to the new master unit, so management of the cluster continues seamlessly. Load
balancing, however, must be configured separately on the upstream switch in this case. For
information about load balancing, see the
Note
Inside Switch
Inside
Spanned
port-channel 1
10.1.1.1
We recommend Spanned EtherChannels instead of Individual interfaces because Individual
interfaces rely on routing protocols to load-balance traffic, and routing protocols often have
slow convergence during a link failure.
ASA1
ten0/9
ten0/8
ASA2
ten0/8
ten0/9
Outside
Spanned
port-channel 2
ASA3
209.165.201.1
ten0/9
ten0/8
ASA4
ten0/8
ten0/9
"Load Balancing Methods" section on page
Cisco ASA Series CLI Configuration Guide
Information About ASA Clustering
Outside Switch
port-channel 6
1-12.
1-5