ASA sub-interface dot1q, ether-channel, redundant

1. Sub_interface(dot1q)

Scenario
-Inside networks: 192.168.10.0 vlan 10
                             192.168.20.0 vlan 20
-Two inside networks are connected to ASA g1 port with a trunk port

* Configure Sub_interfaces for inside networks.

add one more for vlan 20: 192.168.20.1

configure same security levels to communicate between vlans.

Result

This shows from virtual ip 192.168.10.5 to 192.168.20.5 are reachable.

2. Etherchannel
-Configure one etherchannel between ASA and DMZ to improve traffic throughput.

Configuration

Advanced option: Configure load balance for two physical ports in advanced tap .

GNS doesn't support etherchannel  on Ethernet-Switch.

Therefore, I couldn't verify the ether-channel function.

3. Redundant

-Redundant doesn't mean that they do load balancing.

-One port(primary) fails, the other port(secondary) works.

Configuration

Result

Port-channel1 is down because port-channel on switch are not configured

Redundant 1 is working. Active port is G4, Secondary is G5.