cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5351
Views
0
Helpful
5
Replies

ASA preempt ?

Gerard Gacusan
Level 1
Level 1

I have ASA active/standby setup. Seems, when the active fail, it won't preempt to an active state when it becomes available again ... just like HSRP. Is it possible?

thanks,

gerard

5 Replies 5

JORGE RODRIGUEZ
Level 10
Level 10

Gerard, you need to implement preempt command.

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/p.html#wp1885649

Rgds

Jorge

Jorge Rodriguez

I have no option on failover group ...not sure why? I'm using IPSEC plus license.

ASA-Firewall(config)# failover ?

configure mode commands/options:

interface

interface-policy

key

link

mac

polltime

timeout

exec mode commands/options:

active

exec

reload-standby

reset

use this link

this one for ACTIVE/ACTIVE failover

but u rae useing active/standby

so use this linke as a config refrence and only configure one group in the example group one

then u gonna be able to use the preempt command

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml

good luck

please, if helpful rate

I remember now and the reason I have no failover group option. I'm running a single mode.

great help guys and your responses, i will try but no worries this is still in test environment.

I'm still trying to figure out with the config..attach is my current config. anybody has a quick config that can show to us with the preempt?

this attachment is in a Active/Standby and running in single mode.

thanks in advance ...

gerard

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: