Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA Active/Standby replication order, blank config copied

Hi,

I'm in the process of configure active/standby on two asa.

The first time I made the change, I issued failover on the secondary 1st and then failover on the primary and the unit started copying from secondary to primary.

I next wiped the secondary config and removed the config from the primary, followed cisco guide and issued failover on the secondary and then primary and it worked perfect.

My cmds on both attemps were excaulty the same.

Has anyone experienced this before?

4 REPLIES
Super Bronze

Re: ASA Active/Standby replication order, blank config copied

Hi,

I might be missing something but wouldn't it be better to start with the Primary unit?

I mean if you have a configured ASA to which you want to attach a failover pair, it would be better to configure the original ASA with all the failover configurations and activate the failover.

After the Primary ASA has detected that is has no "failover mate" it should be in active state. Now you could configure the ASA with no configurations with failover configurations, activate the failover and connect the Failover pair physically. After the ASA should see their failover pairs and the Prmary ASA with the configurations would replicate them to the blank Secondary ASA.

New Member

ASA Active/Standby replication order, blank config copied

Hi John,

After you change the configuration, had you use command "Write Standby"  from the active ASA?

thanks,

Super Bronze

ASA Active/Standby replication order, blank config copied

If you have an active failover in stable state it should be enough to issue "write memory" on the Active unit. It should save all the changes also to the secondary unit.

I guess the "write standby" command copies the whole Active ASA configurations to the Secondary ASA.

New Member

ASA Active/Standby replication order, blank config copied

Hi,

Thanks for your input.

I have not saved the config to flash, but from what I know this should not matter.

I have today done the same configuration on both the ASA in my lab and works perfect.

The problem is, I have heard other people who also experience the same issue, but know one seems to know why.

In my current setup, I can issue failover in any order and the ASA know which is the active mate. But yesteday the ASA copyied the configuration from the secondary firewall thinking that it was active when it was the other device.

I would like to know what determines tha ASA to know its the active mate?

294
Views
0
Helpful
4
Replies
CreatePlease login to create content