Page 1 of 1

7750(-c12) to Cisco ASA5500 series firewalls

Posted: 01 Dec 2011 18:39
by tgimmel
Has anyone interfaced a 7750 to a pair of ASA5585 or 5520 firewalls in act/stby mode? I am currently trying, but finding that since the ASA's do no have LACP (not until 8.4), a normal lag group cannot tell the stby ASA is inactive. What appears to be happening is the 7750 will send packets with last octet with an even number out one port and odd numbers out the other port.
My 7750 is running R7.0.7

Code: Select all

 port 1/1/5                        
        description "Lag 4 to g0/3"
        ethernet                      
            network                   
                queue-policy "network-queue-policy"
            exit                      
            autonegotiate limited     
        exit                          
        no shutdown                   
    exit                  
   port 1/2/4                        
        description "Lag 4 to g0/3"
        ethernet                      
            network                   
                queue-policy "network-queue-policy"
            exit                      
            autonegotiate limited     
        exit                          
        no shutdown                   
    exit 
    lag 4
        description "Lag 4 to - g0/3"
        port 1/1/5 
        port 1/2/4 
        no shutdown
    exit
        interface "la4"               
            address 69.xx.xx.xx/30  
            description "Interface to  g0/3 Firewall"
            port lag-4                
            icmp                      
                no mask-reply         
                redirects 10 60       
                unreachables 10 60    
                ttl-expired 1000 60   
            exit                      
            cflowd interface          
        exit
 
Thanks for any help!

Tim