cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1037
Views
0
Helpful
2
Replies

Question regarding A/S Failover on ASA 8.2

Hi All,

I have two ASAs 5510 working fine in Failover. One is Active and the other Standby. If I force a failover with the command ''no failover active'' for example, then the secondary ASA takes over statefully. It works great. The only problem that I have is the following:

I am using one physical interface E0/0 as the outside interface, and three subinterfaces on the physical E0/1 inside interface. The three subinterfaces are not being monitored by failover (they show as normal not monitored as the result of the ''show fail'' command).

The ''show monitor-interface'' shows only the outside and inside interface being monitored by failover. In otherwords, the three subinterfaces are not being monitored. What I'm I missing?

Everything works fine, except the failover is not going to be triggered by any of the subinterfaces. How do I fix it?

Thank you All!

Federico.

1 Accepted Solution

Accepted Solutions

Parminder Sian
Level 1
Level 1

Hey Federico,

By default, monitoring of physical interfaces is enabled and monitoring of subinterfaces is disabled.You can control which interfaces affect your failover policy by disabling the monitoring of specific interfaces and enabling the monitoring of others. This lets you exclude interfaces attached to less critical networks from affecting your failover policy.

For units in multiple configuration mode, use the following commands to enable or disable health monitoring for specific interfaces:

To disable health monitoring for an interface, enter the following command within a context:

hostname/context(config)# no monitor-interface if_name

To enable health monitoring for an interface, enter the following command within a context:

hostname/context(config)# monitor-interface if_name

For units in single configuration mode as in your case, use the following commands to enable or disable health monitoring for specific interfaces:

To disable health monitoring for an interface, enter the following command in global configuration mode:

hostname(config)# no monitor-interface if_name

To enable health monitoring for an interface, enter the following command in global configuration mode:

hostname(config)# monitor-interface if_name


Hope this helps.

Regards,

Parminder Sian

View solution in original post

2 Replies 2

Parminder Sian
Level 1
Level 1

Hey Federico,

By default, monitoring of physical interfaces is enabled and monitoring of subinterfaces is disabled.You can control which interfaces affect your failover policy by disabling the monitoring of specific interfaces and enabling the monitoring of others. This lets you exclude interfaces attached to less critical networks from affecting your failover policy.

For units in multiple configuration mode, use the following commands to enable or disable health monitoring for specific interfaces:

To disable health monitoring for an interface, enter the following command within a context:

hostname/context(config)# no monitor-interface if_name

To enable health monitoring for an interface, enter the following command within a context:

hostname/context(config)# monitor-interface if_name

For units in single configuration mode as in your case, use the following commands to enable or disable health monitoring for specific interfaces:

To disable health monitoring for an interface, enter the following command in global configuration mode:

hostname(config)# no monitor-interface if_name

To enable health monitoring for an interface, enter the following command in global configuration mode:

hostname(config)# monitor-interface if_name


Hope this helps.

Regards,

Parminder Sian

worked like a charm!!!

Thanks!!!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: