cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
232
Views
0
Helpful
1
Replies

LAN BASED FAILOVER - problem pinging interfaces

SOL10
Level 1
Level 1

hi there

im trying to configure lan based failover on ASA 5510 (which ive sucessfully created in test lab using asa5510) but there is this strange issue where i cant ping the e0/3 interface prior to confiuring the failover.

So far, ive created a vlan 41 on a cisco 2960switch and placed inter g0/12 (which is conencted to primary ASA e0/3 which i will used as the failover interface into that vlan. the ip add of e0/3 is 192.168.254.1/24

Then, ive placed inter g0/11 (which is connect to secondary asa inter e0/3) into vlan 41 with interface ip of 192.168.254.2/24.

Now prior to entrering the relevant failover commands, i should be able to ping at least the e0/3 interfaces on both ASA's? well i cant.

Ive checked the speed and duplex settings on asa's and switch and all set to 100MB full.

any ideas?

sh vlan brief output:

41 VOICE_FAILOVER active Gi0/11,Gi0/12

sh interface status

Gi0/11 connected to SupAS connected 41 full 100 10/100/1000BaseTX

Gi0/12 connected to SuppA connected 41 full 100 10/100/1000BaseTX

sh interface e0/3 (ASA 1)

Interface Ethernet0/3 "", is up, line protocol is up

Hardware is i82546GB rev03, BW 100 Mbps

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

Available but not configured via nameif

MAC address 001e.f762.c8b3, MTU not set

IP address 192.168.254.1, subnet mask 255.255.255.0

0 packets input, 0 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

0 L2 decode drops

0 packets output, 0 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

input queue (curr/max blocks): hardware (4/0) software (0/0)

output queue (curr/max blocks): hardware (0/0) software (0/0)

sh interface e0/3 (ASA sec)

Interface Ethernet0/3 "", is up, line protocol is up

Hardware is i82546GB rev03, BW 100 Mbps

Full-Duplex(Full-duplex), 100 Mbps(100 Mbps)

Available but not configured via nameif

MAC address 001e.f762.9c8b, MTU not set

IP address 192.168.254.1, subnet mask 255.255.255.0

0 packets input, 0 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

0 L2 decode drops

0 packets output, 0 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 late collisions, 0 deferred

0 input reset drops, 0 output reset drops

input queue (curr/max packets): hardware (0/16)

output queue (curr/max packets): hardware (0/0)

Also, ive noticed that although the interfaces are up and up, the 192.168.254.0/24 network is not showing as connected under the sh route command.

what other info would be needed? As i said the failover conmmands havent been entered yet, i want to undastand why i cant ping the interfaces e0/3.

thanks

1 Reply 1

SOL10
Level 1
Level 1

hi all

got it. It was to do with the fact that I didnt enter the nameif command on the e0/3 interfaces. i thought that was optional (apparantly not )

so looks like you need the nameif command as well for the network to show as connected under sh route

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card