ASA firewalls in HA - access backup

Unanswered Question
Jul 21st, 2010
User Badges:

How do you access the standby firewall in a HA availability setup ?  In other words, Is there a way to connect to the backup unit so that I can run the enable command and then do a "show tech-support" which will give the serial number?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jennifer Halim Wed, 07/21/2010 - 07:09
User Badges:
  • Cisco Employee,

Definitely can.


If you haven't already configured the standby ip address, you would need to configure the standby ip address on the Active ASA.


Example:

interface g0/1

     nameif inside

     ip address 10.1.1.1 255.255.255.0 standby 10.1.1.2


Once the above has been configured for each interface, you can access the standby ip address for the standby ASA. In the above case, it's 10.1.1.2.


Hope that helps.

lkadlik Wed, 07/21/2010 - 07:14
User Badges:

I agree that you can access the ASA via the standby address but if i am thinking this thru properly that will only allow me access to the firewall that is currently the primary firewall.


What i am trying to do is to access the ASA that is the slave/standby etc without failing over to it. Thoughts?

Actions

This Discussion