The Cisco ASA 5505 supports a maximum 150 Mbps stateful inspection throughput with a 75 Mbps IPS throughput. In all my test I was plugged on SW02 on a port on VLAN 1.The Cisco ASA 5505 Secuirty Plus Appliance is part of the Cisco family which provides the broadest line of solutions for transporting data, voice and video while ensuring that networks both public and private operate with maximum performance, security, and flexibility. On SW02 I can see mac address of Cisco ASA and mac address of HSRP IP on Eth10 but I can't see ARP for HSRP IP 192.168.254.1 On Cisco ASA I have disable proxy ARP on inside interface and in this situation I can see ARP entry for HSRP 192.168.254.1 and mac address of HSRP IP is present on Eth1 of Cisco ASA and it's correct. It seems that HSRP does not route packets, but if I try to ping Cisco ASA (192.168.254.254) from SW01 the first ping is not successful but then it populates the ARP on SW01 and everything returns to work perfectly. A ll ping requests to 8.8.8.8 sent to the default gateway (192.168.254.1) do not reach the Cisco ASA. In this situation I can ping all devices because I'm in same network, in Eth1 on SW01 I can see mac address of Cisco ASA and I can ping Cisco ASA from any devices but on SW01 does not appear ARP for Cisco ASA. SW01 has a higher priority in the HSRP and returns to Active on HSRP correctly, the spanning tree correctly blocks the Eth1 port on SW02 because SW01 is root for MST instance. If I reload SW01 spanning tree and HSRP work correctly and all work, but when SW01 comes back I can't go to the internet. The connections between the devices are as follows: On SW01 and SW02 I have a MST instance with all VLAN 1-4094. I have two switches Cisco C3560 (Model: WS-C3560-8PC, Software version: 12.2(35)SE5, Software Image: C3560-IPBASE-M) and one Cisco ASA 5505.Īll three devices are in vlan 1 with these ip configuration:

Asa 5505