cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
22561
Views
15
Helpful
3
Replies

ASA Failover change primary to secondary and viceverse

guillermoochoa
Level 1
Level 1

Hi, could you tell me if it is possible to change the primary unit to secondary and secondary unit be the primary, only by appliyng the command: ..."failover lan unit primary " on the secondary ASA???

Regards!

3 Replies 3

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Guillermo,

Do you want to change the current role (active and standby roles) or just the tag of the device (secondary or primary)?

If you want to change the active unit to be the standby you just nedd to apply the following command on the active unit

-     no failover active

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

The Tag of primary and secondary, and that te secondary becomes the active ASA.

Let me add that both ASAs have premium license (active/active) and the scheme is in active/failover.

The second ASA which is in secondary mode is newer, so i want to change it to be the primary unit of the failover scheme.

Regards!!

Hello Guillermo,

So you are running Active/Active failover

To change the status ( primary/secondary) you will need to get into the failover group and add the new status:

Example:

failover group 2
  secondary
.

In order to change the active unit for the failover cluster you need to add the following command in the system execution space on the active unit.

no failover active group group_id


Please rate helpful posts.



Julio






Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Review Cisco Networking products for a $25 gift card