Using management interface for stateful failover on a ASA 5520

Unanswered Question
Feb 9th, 2007

Is it possible to use the management interfaces for stateful failover on a ASA 5520?

Thanks.

V/

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

With Stateful failover the ASA maintains the connection table and replicates it to the standby ASA. In stateful failover the ASA sends updates to the standby unit whenever there is a change in the state table. In this mode it sends stateful updates over a dedicated link to the standby unit. So when the standby needs to become active it does not need to build any connection entires since all the entries already exists in its database. You can use the same physical interface for both failover control and stateful link updates.Refer URL

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/config/failover.htm

vitripat Wed, 02/21/2007 - 12:56

Yes you can use management interface for stateful failover on ASA. However, if you have a ASA-5510, make sure it has a "Security Plus" license. With "Security Plus" license only, you could use management interface for normal use.

Actions

This Discussion