Active/Standby failover automatic primary active

Unanswered Question
May 12th, 2008
User Badges:

I have 2 ASAs 5510 with same physical configuration and running ok with active/standby failover mode. Like we have PREEMPT command in active/active failover to get back primary active after its been rebooted from failed mode. This command makes primary back to active and makes secondary firewall standby automatically.

Need help to know any such command for active/standby failover for automatic primary active. Currently we have to use command FAILOVER ACTIVE on primary to make it active manually.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
srue Mon, 05/12/2008 - 06:01
User Badges:
  • Blue, 1500 points or more

no, this is not possible. you must manually move the original primary back to active.

cisco24x7 Mon, 05/12/2008 - 06:18
User Badges:
  • Silver, 250 points or more

Remember, failover in ASA works differently than HSRP. ASA does NOT use

HSRP. Furthermore, there is NO HSRP ip address in ASA either. You are

talking about two different technologies.

Think of it this way. HSRP technology works very similar to VRRP and

Juniper NSRP. All of these technologies use virtual IP address. If you

have two devices, you will have an Virtual IP address, in addition

to the physical ip addresses of the two devices. ASA does not use the

extra VIP.

utkarsh.vijay.sawant Mon, 05/12/2008 - 06:24
User Badges:

For routers its possible to have failover by using HSRP, VRRP by using virtual IP.

But we can do the same thing in Firewall in active/active failover without virtual IP.

I just want some method to implement the same in active/standby failover. IF Any.


This Discussion