Cisco ASA Series Cli Configuration Manual page 293

Chapter 1 Configuring a Cluster of ASAs
Control Link
port-ch1
Switch
Purpose
Cluster control link
Inside and outside interfaces TenGigabitEthernet 0/8 and
Management interface
ASA1
Cluster
port-ch1
VLAN 101 port-ch2
port-ch1
Connect Interfaces on each of 4
ASAs
TenGigabitEthernet 0/6 and
TenGigabitEthernet 0/7
TenGigabitEthernet 0/9
Management 0/0
ASA2 ASA3
port-ch1
port-ch2
port-ch2.200 Inside VLAN 200
port-ch2.201 Outside VLAN 201
port-ch3
port-ch5
Inside VLAN 200
Outside VLAN 201
Trunk
Cisco ASA Series CLI Configuration Guide
Configuring ASA Clustering
ASA4
port-ch1
port-ch4
Management
VLAN 100
To Switch Ports
8 ports total
For each TenGigabitEthernet 0/6
and TenGigabitEthernet 0/7 pair,
configure 4 EtherChannels (1 EC
for each ASA).
These EtherChannels must all be
on the same isolated cluster
control VLAN, for example
VLAN 101.
8 ports total
Configure a single EtherChannel
(across all ASAs).
On the switch, configure these
VLANs and networks now; for
example, a trunk including
VLAN 200 for the inside and
VLAN 201 for the outside.
4 ports total
Place all interfaces on the same
isolated management VLAN, for
example VLAN 100.
1-29