Solved

Cisco ASA5510

Posted on 2013-06-17
4
309 Views
Last Modified: 2013-06-28
I need to check  check max throughput of our  Gig ASA-5510...

this link suggests it could be either 150 or 300Mbps..?

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html
'Up to 150 Mbps with AIP SSM-10; 300 Mbps with AIP SSM-20'

If two of these were setup as active-active pair - would we get effectively double throughput? Are these actual working figures (or max possible)?

Thanks
0
Comment
Question by:oasisuk
  • 2
4 Comments
 
LVL 20

Expert Comment

by:rauenpc
Comment Utility
Your throughput depends on whether or not you are using the SSM modules. If you don't have the hardware modules installed or you don't have traffic going through them then you have the 300M throughput. Otherwise it's based on the SSM module.

Active/active won't necessarily give you any extra throughput at all. if you have multiple contexts configured, and you have context1 active on ASA1 and context 2 active on ASA2, then potentially you can go beyond the 300M limit. However, most configurations don't actually employee a true active/active topology since only a single default context is configured. With a single context traffic only goes through one active ASA at a time
0
 
LVL 15

Expert Comment

by:max_the_king
Comment Utility
Hi,
yes you should double with active/active config.
No that is max possible, although i've never reached that limit with my ASAs, and I never experienced any problem so far.

hope this helps
max
0
 

Author Comment

by:oasisuk
Comment Utility
Can I check remotely if I have the SSM modules installed?

If it doesn't have this, I could upgrade the module on the existing model?

Thanks
0
 
LVL 20

Accepted Solution

by:
rauenpc earned 500 total points
Comment Utility
ASA01# show inventory
Name: "Chassis", DESCR: "ASA 5520 Adaptive Security Appliance"
PID: ASA5520-K8        , VID: V02     , SN: xxxxxxx

Name: "power supply", DESCR: "ASA/IPS 180W AC Power Supply"
PID: ASA-180W-PWR-AC   , VID: V01     , SN: xxxxxxx

ASA01#

If you have the SSM hardware module it will show up in this command. You could always purchase this module and install it, but just to make sure... do you think this module gives you any increase in throughput? Without the module you get 300M throughput. With the module you get the additional feature of the module and since traffic must flow through the module itself your total throughput will be limited as indicated based on the module. If you don't need the features of the module, don't get the module as it would be a waste of money.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

Broadband over Power Lines Broadband over Power Lines is the technology of transmitting computer data through power lines. This method of connectivity allows the user to have access to the internet without having to rely on additional cables, suc…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now