LAN Based ACtive/Standby Failiver on ciso ASA 5540

Unanswered Question
Nov 26th, 2009
User Badges:


Can we configure LAN based active/standby failover on cisco asa 5540. Firewall is in routed mode with single context and i want to use managment interface to configure failover.Please suggest and step to configure the failover.

Thank You


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Andy White Thu, 11/26/2009 - 13:42
User Badges:


Are you wishing to configure the Active/Standby via the Management port or monitor this interface as part of the failover?  If the latter then it's not recommended, the firewalls will changes roles should these interfaces change state, which you really don't want happening.  Let me know how you get on on the link provided in the other post, I have configure 2 ASA 5520 in Active/Standby mode and they work just great

chetansharma Thu, 11/26/2009 - 20:08
User Badges:


Actually i dont have any more interface to configure failover , thats why i have to use managment interface to configure failover, my question is this can it work when firewall is in routed mode with single context mode,i want to configure stateful lan based active/standby failover.

From the above document my understanding says tht we can configure it, and actually i had configured it but when my active firewall goes down standby will take over but my application which are running in intranet and internet zones are not working.

The configuration of primary firewall replicates to the secondary when it goes down and i also confirmed these and and all the interfaces is up but my websites which are in dmz and inside zones are not working when primary firewall goes down.

Andy White Fri, 11/27/2009 - 01:11
User Badges:

Can you post your configure for your interfaces and do a "sh failover" and post here please.

Andy White Fri, 11/27/2009 - 08:57
User Badges:

Your interfaces don't seem to have standby IP's, please post "sh run | i monitor" and post your ASA interfaces to see how you have configured them.

Rate if helpful


This Discussion