cannot telnet to standby asa

Unanswered Question
Apr 26th, 2010
User Badges:

Hi all

Is there any reason why I wouldnt be able to telnet to my standby asa? I can ping it from the other ASA fine,via the lan interface, but I cannot ping it from other subnets, should I be able to get to both firewalls for management in the active/standby config ?



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jennifer Halim Mon, 04/26/2010 - 04:25
User Badges:
  • Cisco Employee,

Yes, you should be able to telnet to the standby ASA.

What does "show failover" show? Where are you trying to telnet to the standby ASA from?

carl_townshend Mon, 04/26/2010 - 05:05
User Badges:

Hi There

it appearred to be a routing issue, the firewalls were using eigrp to the next hop, I install a static route on them and this fixed the issue.


Maykol Rojas Mon, 04/26/2010 - 10:39
User Badges:
  • Cisco Employee,
  • Participante Destacado,

    Mejor Publicación, Diciembre del 2015

Hello Carl

You are right, and just to backup your answer, here is the information about stateful failover, it says that no routing table information will be passed to the secondary unit,

The information that is not passed to the standby unit when stateful       failover is enabled includes these:

  • The HTTP connection table (unless HTTP replication is           enabled)

  • The user authentication (uauth) table

  • The routing tables

  • State information for security service           modules

That would also cause extra delay when doing failover as the routing protocol would need to re-calculate the routes in order to populate the routing table

Here is the document in case you need it

Thanks and I am glad that you were able to solve it.




This Discussion