Manualsbrain.com
  1. Manuals
  2. Brands
  3. Cisco
  4. Cisco ASA 5580 Adaptive Security Appliance
  5. Leaflet

Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet

Download
Page of 904
 
8-68
Cisco ASA Series 
일반적인 작업 CLI 구성 가이드
 
8 
장     ASA 클러스터
  ASA 
클러스터링의 예
트래픽 분리
내부 네트워크와 외부 네트워크 간의 트래픽을 물리적으로 분리하고자 할 수 있습니다.
위의 다이어그램에 표시된 것과 같이, 왼쪽에는 내부 스위치에 연결되는 스팬 EtherChannel이 하
나 있고 오른쪽에는 외부 스위치에 연결되는 스팬 EtherChannel이 있습니다. 필요한 경우 각 
EtherChannel
에 VLAN 하위 인터페이스를 생성할 수도 있습니다.
각 유닛의 인터페이스 모드
cluster interface-mode spanned force
ASA1 
마스터 부트스트랩 구성
interface tengigabitethernet 0/6
channel-group 1 mode on
no shutdown
interface tengigabitethernet 0/7
channel-group 1 mode on
no shutdown
interface port-channel 1
description CCL
cluster group cluster1
local-unit asa1
cluster-interface port-channel1 ip 192.168.1.1 255.255.255.0
priority 1
key chuntheunavoidable
enable noconfirm
ASA1
333220
ten0/6
ten0/7
ten0/8
man0/0
ten0/9
ASA2
ten0/6
ten0/7
ten0/8
man0/0
ten0/9
ASA3
ten0/6
ten0/7
ten0/8
ten0/9
Switch
port-ch1
p
ort-ch2
port-ch3
Cluster Control Link
port-ch1
192.168.1.1, .2, and .3
port-ch4
port-ch1
port-ch1
port-ch1
port-ch2 Spanned
inside
10.10.10.5/24, 2001:DB8:1::5/64
MAC: 000C.F142.4CDE
Switch
man0/0
port-ch3 Spanned
outside
209.165.201.1/27, 2001:DB8:2::8/64
MAC: 000C.F142.5CDE
management
10.1.1.1 (Pool: .2-.9),
2001:DB8::1002/64 (Pool: 8 IPs)