[c-nsp] asa 8.4 + etherchannel + nexus7k

[robbie.jacka at regions.com]

strong recommendation on the direct cable for failover; you may risk a
split-brain scenario otherwise.
--
robbie




                                                                           
             Ryan West                                                     
             <rwest at zyedge.com                                             
             >                                                          To 
             Sent by:                  Federico Cossu                      
             cisco-nsp-bounces         <federico.cossu at gmail.com>,         
             @puck.nether.net          cisco-nsp                           
                                       <cisco-nsp at puck.nether.net>         
                                                                        cc 
             04/05/2011 01:43                                              
             PM                                                    Subject 
                                       Re: [c-nsp] asa 8.4 + etherchannel  
                                       + nexus7k                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           




On Tue, Apr 05, 2011 at 14:27:18, Federico Cossu wrote:
> Subject: [c-nsp] asa 8.4 + etherchannel + nexus7k
>
> hi all,
> i can't find any useful information about connecting ASA 8.4
> etherchannels to
> 2 different nexus7K, where the 2 nexus devices are aggregating
> channels with vPC.
> the idea is to trunk inside, outside and failover vlan to ASA and let
> it manage routing between them.
>
8.4 supports LACP, so you should be fine to configure in this manner.
Might want to consider a direct cable for the failover though.

> no L3 dynamic routing between asa <---> nexus, my concern is that the
> nexus are also the L2/L3 boundary for the servers vlan, server have
> their default gateway on the nexus (hsrp).
>
> configuration guide cites only vss, not vpc unfortunately.
> http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide
> /
> interface_start.html#wp1329030
>
> thank you all for any shared information or experience.
> bye

-ryan

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/