Connecting PA820 to Cisco ASA HA

[sajidsil]

Hi All,

I want to connect PA820 to ASA HA setup. ASA1 and ASA2 need to connect to PA820. Can I use link aggregation on PA820 for this scenario? If one of the ASAs fails will this setup work to pass on the traffic using the other ASA.

Thank you.

[OtakarKlier · Accepted solution]

Hello,

So you have 2x ASA's and 1x PAN? Dont think an AE would work, I could be wrong. How about making the physical interfaces on the PAN layer 2 and making the vlan interface on the PAN layer3. This way the two PAN ports are just 'switch' ports.

Regards,

[OtakarKlier · Accepted solution]

Hello,

So you have 2x ASA's and 1x PAN? Dont think an AE would work, I could be wrong. How about making the physical interfaces on the PAN layer 2 and making the vlan interface on the PAN layer3. This way the two PAN ports are just 'switch' ports.

Regards,

[BPry]

@sajidsil,

Actually AE ports would work perfectly fine here as the non-active port would simply be shown as 'down' as the HA process in ASA shuts down the ports. However, @OtakarKlier's method is better then AE interfaces in this situation.