Cisco ASA Series Cli Configuration Manual page 327

Chapter 1 Configuring a Cluster of ASAs
Redundant Interface (PBR or ECMP)
Switch
Redundant interfaces can be used to provide link-level redundancy.
When using Individual interfaces, switching to a backup interface is similar to how it behaves in
non-clustering mode. The ASA activates the backup link if the primary link fails. It takes time for the
Spanning Tree on the switch to converge before the backup link is activated on the switch side. The
backup links can be connected to a separate switch to provide inter-switch redundancy.
Interface Mode on Each Unit
cluster interface-mode individual force
ASA1 Master Bootstrap Configuration
interface tengigabitethernet 0/6
port-channel span-cluster
nameif outside
ip address 209.165.201.1 255.255.255.224
ipv6 address 2001:DB8:2::8/64
mac-address 000C.F142.5CDE
inside
10.10.10.5/24 (Pool: .6-.9)
2001:DB8:4:3/64 (Pool: 4 IPs)
10.1.1.1 (Pool: .2-.5),
2001:DB8::1001/64 (Pool: 4 IPs)
channel-group 1 mode on
Cluster Control Link
192.168.1.1, .2, and .3
ASA1
ten0/6
ten0/7
ten0/8
ten1/6 ten0/9
ten1/7
man0/0
man0/1
ASA2
ten0/6
ten0/7 ten0/8
ten1/6 ten0/9
ten1/7
man0/0
man0/1
ASA3
ten0/6
ten0/7 ten0/8
ten1/6 ten0/9
ten1/7
man0/0
outside
man0/1
209.165.201.1 (Pool: .2-.5)
management 2001:DB8:DD:1/64 (Pool: 4 IPs)
Cisco ASA Series CLI Configuration Guide
Configuration Examples for ASA Clustering
Switch
1-63