ASA 5505 redundant Inside Links

Since the 5505 doesn't support redundant interfaces I am having some design problems with making the 5505 redundant to the inside of the network. General layout is that there are several 5505's that tie into a single 6500. I would like for them to tie into a second 6500 hundred for the same subnet, i.e. vlan 10 on both interfaces on the inside. I know the 5505 doesn't support spanning-tree also. Also there is nothing layer 3 on the inside other than the inside interface gateway of the ASA itself via a SVI. Would the best option be to tie those 5505's into another switch that multi-homes into the 6509s? The goal here is two keep it so that if a single 6500 fails all services stay up and online.
chipschAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

chipschAuthor Commented:
I imagine it wouldn't be safe to just plug two inside ports on the same vlan into each different switch. Any thoughs?
Ernie BeekExpertCommented:
Well.....
On the 5505 those are 'switchports'. When you hook up two switches through two ports, one of the ports will be blocked to prevent loops. So do you have an opportunity to just try that to see if indeed a port becomes blocked?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
chipschAuthor Commented:
I could give it a try but all of the documentation says that the ASA itself doesn't support spanning-tree. Will post back with results later.
Discover the Answer to Productive IT

Discover app within WatchGuard's Wi-Fi Cloud helps you optimize W-Fi user experience with the most complete set of visibility, troubleshooting, and network health features. Quickly pinpointing network problems will lead to more happy users and most importantly, productive IT.

Ernie BeekExpertCommented:
But the other end should support it. So let's see if that is enough.
Just don't try it during peak hours ;)
chipschAuthor Commented:
Oh no I am going to use a lab one and set it up when I can find the time. I don't ever make unsure changes or proof of concept tasks in production. But thanks for the reminder :)
Ernie BeekExpertCommented:
You're welcome, sometimes you don't know what people might do ;)

Good luck & let me know.
chipschAuthor Commented:
So finally got a chance to throw a quick test together for this. While the ASA doesn't support spanning-tree itself the switch seems to figure it out well enough. See below output.


VLAN0504
  Spanning tree enabled protocol rstp
  Root ID    Priority    33272
             Address     000a.4191.4d00
             This bridge is the root
             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    33272  (priority 32768 sys-id-ext 504)
             Address     000a.4191.4d00
             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec
             Aging Time 300

Interface           Role Sts Cost      Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/23              Desg FWD 19        128.23   P2p
Fa0/24              Back BLK 19        128.24   P2p

Thanks erniebeek, works like a charm.
chipschAuthor Commented:
Thanks for the advice.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.