ASA 5500 Active Stand Failover - Standby IP

Unanswered Question
Apr 14th, 2009
User Badges:


Is a primary and standby IP address required for EACH interface on the firewall for failover to work properly?

I have setup a pair without having a standby IP on all interface, and only having it on the stateful failover link, and failover seems to work fine, however SNMP graphing does not.

I am being told that failover requires a standby on each interface, but this is the first time I am hearing this, so wanted to see other users experience.

The only problem I am seeing is when a failover pair does not have a standby IP for each interface, that the graphing does not work.

Thanks for any comments.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
srue Wed, 04/15/2009 - 07:37
User Badges:
  • Blue, 1500 points or more

the only time i've ever seen it configured w/o standby addresses is in a lab. failover worked in and of itself, but like you're finding out, there are side effects to this configuration.

if you have the addresses to spare on each interface, just configure standby IP's.

r.spiandorello Wed, 04/15/2009 - 07:38
User Badges:

Hello, I've never realized an active/standby configuration without the standby inteface IP and I cannot find informations about that on the user guide.



This Discussion