ASA firewalls in HA - access backup

lkadlik · ‎07-21-2010

How do you access the standby firewall in a HA availability setup ? In other words, Is there a way to connect to the backup unit so that I can run the enable command and then do a "show tech-support" which will give the serial number?

Jennifer Halim · ‎07-21-2010

Definitely can.

If you haven't already configured the standby ip address, you would need to configure the standby ip address on the Active ASA.

Example:

interface g0/1

nameif inside

ip address 10.1.1.1 255.255.255.0 standby 10.1.1.2

Once the above has been configured for each interface, you can access the standby ip address for the standby ASA. In the above case, it's 10.1.1.2.

Hope that helps.

lkadlik · ‎07-21-2010

I agree that you can access the ASA via the standby address but if i am thinking this thru properly that will only allow me access to the firewall that is currently the primary firewall.

What i am trying to do is to access the ASA that is the slave/standby etc without failing over to it. Thoughts?