Failover OFF after apply license Key??

Unanswered Question

We have active/standy ASA5520 with 7.22 code.

I just applied 10 SSL VPN license to both ASA. When I type "show failover", it shows "Failover OFF" at primary ASA.

It shows "Failover Off (pseudo-Standby)" at secondary ASA.

The license seems identical on both ASA.

You guys know what happen?? How to fix it?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
elparis Thu, 11/15/2007 - 07:14
User Badges:
  • Cisco Employee,


What is the output from "show run failover"?

elparis Thu, 11/15/2007 - 07:14
User Badges:
  • Cisco Employee,

Sorry, and also what is the output from "show version"?

srue Thu, 11/15/2007 - 07:21
User Badges:
  • Blue, 1500 points or more

i'm confused what the problem here is.

Is failover now not part of your license (show version will tell us this)? Or is failover simply turned off in the config (turn back on by typing "failover", along w/ rest of failover config if that's missing too).

Hi guy,

Thanks for help. Active/standby has been configured one year ago, we just bought TWO of 10 SSL VPN License.

Please see the attachment for pimary and secondary (show ver and show run failover).

It seems failover turn off after apply the ssl vpn license.

If I turn it on now, will that affect traffic?


elparis Thu, 11/15/2007 - 07:59
User Badges:
  • Cisco Employee,

Everything looks good - from both a configuration point of view and from a license point of view.

The only missing thing is to turn failover on:

configure terminal


write memory

Do this on the primary unit first, and then on the secondary a minute later.

I am assuming that failover was working fine before you updated your license.

Traffic should not be affected when you turn failover on.

elparis Thu, 11/15/2007 - 11:11
User Badges:
  • Cisco Employee,

No problem; glad it helped.

Yes, on the secondary there is nothing that needs to be done from a configuration point of view, with the exception of the basic failover commands:

failover lan unit secondary

failover lan interface

failover key XXXXXXX

failover interface ip standby


After this basic configuration is in place the rest of the configuration will be replicated from the primary unit. In your case you already had all the failover configuration, so just turning failover on with the "failover" command put the secondary in standby mode.


This Discussion