ASA redundants 冗余接口实验
   ASA redundants冗余接口，可以把多条物理线路捆绑成一条逻辑的线路，增加带宽，提高可靠性，捆绑成一条逻辑线路后我们又通过在这个redundant口来划分子接口，其它配置基本上类似上次vlan-interface的实验配置。
Top如下：
 

需求：
1，把fa1/2-3的两条物理线路当做一条逻辑的物理通道去负载均衡的承载流量
2，让各VLAN之间完全通信
实现：
ASA(cloud):
Interface e0/0
No sh
Interfacee0/1
No sh
Interface redundant 1
No sh
Member-interface e0/0
Member-interface e0/1
Exit
Interface redundant 1.1
No sh
Vlan 2
Nameif inside1
Security-level 100
Ip add 192.168.1.1 255.255.255.0
Interface redundant 1.2
No sh
Nameif inside2
Security-level 100
Ip add 192.168.2.1 255.255.255.0
Exit
Same-security-traffic permit inter-interface
 
SW:
Interface range fa1/0 -5
No sh
Interface range fa1/0 , fa1/5
No sh
Switchport mode access
Switchport access vlan 2
Interface range fa1/2 , fa1/4
Switchport access vlan 3
Exit
Interface range fa1/2 -3
No sh
Switchport trunk encapsulation dot1q
Switchport mode trunk
Switchport trunk allowed vlan all
Exit
 
 
各pc就不都说了，配静态默认或默认网关等方式来模拟PC。
测试：
 
R6#ping 192.168.2.1
 
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/19/44 ms
R6#ping 192.168.2.2
 
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/29/48 ms
R6#ping 192.168.1.2
 
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/25/52 ms
R6#ping 192.168.1.3
 
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/15/32 ms
R6#
小实验成功。