Cisco ASA Series Cli Configuration Manual page 302

Configuring ASA Clustering
Prerequisites
•
•
•
•
•
•
Enabling the Cluster Control Link Interface
You need to enable the cluster control link interface before you join the cluster. You will later identify
this interface as the cluster control link when you enable clustering.
We recommend that you combine multiple cluster control link interfaces into an EtherChannel if you
have enough interfaces. The EtherChannel is local to the ASA, and is not a Spanned EtherChannel.
The cluster control link interface configuration is not replicated from the master unit to slave units;
however, you must use the same configuration on each unit. Because this configuration is not replicated,
you must configure the cluster control link interfaces separately on each unit.
Prerequisites
Determine the size of the cluster control link by referring to the
on page
Restrictions
•
•
•
Cisco ASA Series CLI Configuration Guide
1-38
You must use the console port to enable or disable clustering. You cannot use Telnet or SSH.
Back up your configurations in case you later want to leave the cluster, and need to restore your
configuration.
For multiple context mode, complete these procedures in the system execution space. To change
from the context to the system execution space, enter the changeto system command.
We recommend enabling jumbo frame reservation for use with the cluster control link. See the
"Enabling Jumbo Frame Support (Supported Models)" section on page
With the exception of the cluster control link, any interfaces in your configuration must be
configured with a cluster IP pool or as a Spanned EtherChannel before you enable clustering,
depending on your interface mode. If you have pre-existing interface configuration, you can either
clear the interface configuration (clear configure interface), or convert your interfaces to cluster
interfaces according to the
you enable clustering.
When you add a unit to a running cluster, you may see temporary, limited packet/connection drops;
this is expected behavior.
1-7.
You cannot use a VLAN subinterface as the cluster control link.
You cannot use a Management x/x interface as the cluster control link, either alone or as an
EtherChannel.
For the ASA 5585-X with an ASA IPS or ASA CX module, you cannot use the module interfaces
for the cluster control link.
"Configuring Interfaces on the Master Unit" section on page 1-31
Chapter 1 Configuring a Cluster of ASAs
1-33.
"Sizing the Cluster Control Link" section
before