topic Re: Connecting PA820 to Cisco ASA HA in General Topics

Connecting PA820 to Cisco ASA HA

sajidsil — Wed, 09 Jan 2019 22:07:53 GMT

Hi All,

I want to connect PA820 to ASA HA setup. ASA1 and ASA2 need to connect to PA820. Can I use link aggregation on PA820 for this scenario? If one of the ASAs fails will this setup work to pass on the traffic using the other ASA.

Thank you.

Re: Connecting PA820 to Cisco ASA HA

OtakarKlier — Wed, 09 Jan 2019 23:19:49 GMT

Hello,

So you have 2x ASA's and 1x PAN? Dont think an AE would work, I could be wrong. How about making the physical interfaces on the PAN layer 2 and making the vlan interface on the PAN layer3. This way the two PAN ports are just 'switch' ports.

Regards,

Re: Connecting PA820 to Cisco ASA HA

BPry — Thu, 10 Jan 2019 18:44:26 GMT

@sajidsil,

Actually AE ports would work perfectly fine here as the non-active port would simply be shown as 'down' as the HA process in ASA shuts down the ports. However, @OtakarKlier's method is better then AE interfaces in this situation.