Между Каталистом и АСА настроен транк, со стороны АСА редандант интерфейс, со стороны Каталиста эзерченнел. По транку должны ходить 1-й и 4-й влан. После перезагрузки АСА не ходит 1-й влан, помогает передернуть например один из физических портов на АСА, сразу появляется коннективити до других девайсов в 1-й влан.
Конфигурация:
Кат:
interface GigabitEthernet1/0/23
description dc-shanghai-fw
switchport trunk encapsulation dot1q
switchport trunk native vlan 999
switchport trunk allowed vlan 1,3,4
switchport mode trunk
switchport nonegotiate
logging event trunk-status
logging event spanning-tree
logging event status
load-interval 30
spanning-tree portfast trunk
spanning-tree bpduguard disable
channel-group 2 mode on
end
!
interface GigabitEthernet2/0/23
description dc-shanghai-fw
switchport trunk encapsulation dot1q
switchport trunk native vlan 999
switchport trunk allowed vlan 1,3,4
switchport mode trunk
switchport nonegotiate
logging event trunk-status
logging event spanning-tree
logging event status
load-interval 30
spanning-tree portfast trunk
spanning-tree bpduguard disable
channel-group 2 mode on
!
interface Port-channel2
description dc-shanghai-fw
switchport trunk encapsulation dot1q
switchport trunk native vlan 999
switchport trunk allowed vlan 1,3
switchport mode trunk
switchport nonegotiate
logging event trunk-status
logging event spanning-tree
logging event status
load-interval 30
spanning-tree portfast trunk

АСА:
interface GigabitEthernet0/0
description LAN
no nameif
no security-level
no ip address
!
interface GigabitEthernet0/1
description LAN
no nameif
no security-level
no ip address
!
interface Redundant2
member-interface GigabitEthernet0/0
member-interface GigabitEthernet0/1
no nameif
no security-level
no ip address
!
interface Redundant2.1
description LAN NetDevices
vlan 1
nameif inside
security-level 100
ip address 10.196.0.1 255.255.255.0
!
interface Redundant2.4
description LAN DMZ
vlan 4
nameif dmz
security-level 100
ip address 10.196.3.251 255.255.255.0

dc-shanghai-fw# sh ver

Cisco Adaptive Security Appliance Software Version 8.2(5)
Device Manager Version 6.4(5)

Compiled on Fri 20-May-11 16:00 by builders
System image file is "disk0:/asa825-k8.bin"
Config file at boot was "startup-config"

dc-fw up 36 mins 20 secs

Hardware:   ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz