aaa server Failed to active on ASA

butlerjames · ‎05-28-2007

Does anyone know if there is a method to change an aaa configured server from failed to active?

For example I have two RSA servers configured as aaa servers on my ASA. I currently have a problem with the second one (sho aaa server shows it as failed) This isn't normally an issue expect when I reboot the main RSA server which results in the primary aaa server to go to 'failed'. I can't find any way of resetting this other than a reload.

Premdeep Banga · ‎05-29-2007

Hi,

Try "reactivation-mode timed"

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_2/cmd_ref/qr_711.htm#wp1644016

by default its depletion for 10 minutes.

Switching it to timed, ASA will check every 30 sec for authentication from failed server, to see if its alive.

Try this and let me know.

Regards,

Prem