Symptom

This is a request to make ASA configuration guide more clear regarding coexistence between user data traffic and failover messages on the same interface. ASA currently doesn't support sharing physical interface between failover and data even if different VLANs are used for failover link and data traffic. The error message is: "ERROR: Can not configure failover interface on a shared physical interface". This holds true for both regular physical interfaces and port-channels.

Conditions

ASA 8.x and 9.x.

Workaround

Use different interface for failover link.

Further Problem Description