Unanswered Question
Aug 21st, 2008

In active/standby ASA 5540 setup the primary was rebooted to fix an issue. Later the secondary ASA took the IP of primary and the primary is shown down.What can be done to resolve the issue.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
sachinraja Thu, 08/21/2008 - 22:01

The failover firewall normally takes the IP address of the primary firewall incase of any problem. Virtual MACs are also swapped between the units. Unlike HSRP, wherein if the primary comes back, it becomes the master, firewalls do not have this character. To bring back the primary to active mode, you can reboot the failover firewall (which is now in active state)..

Hope this helps.. rate replies if found useful..



This Discussion