Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA Failover without Standby addresses

We have 2 ASA firewalls in Routed mode and Active/Standby failover.

If you do not configure Standby IP addresses for the interfaces is Normal (waiting) an expected behaviour?

This host: Primary - Active

Interface outside (217.112.81.130): Normal (Waiting)

Interface inside (10.102.1.1): Normal (Waiting)

Interface mgm (192.168.5.1): Normal (Waiting)

Other host: Secondary - Standby Ready

Interface outside (0.0.0.0): Normal (Waiting)

Interface inside (0.0.0.0): Normal (Waiting)

Interface mgm (0.0.0.0): Normal (Waiting)

I cannot find any definitive answers on the Cisco sites for this.

Help.

2 REPLIES
Silver

Re: ASA Failover without Standby addresses

Yes, this is normal. I would recommend that you set standby IP addresses on the interfaces else failovers will not occur if there is an interface failure. Refer following link for failover configurations-

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/failover.html#wp1064158

Hope that helps.

Regards,

Vibhor.

New Member

Re: ASA Failover without Standby addresses

sorry. failover DOES occur when an interface is disconnected or fails even without the standby addresses!

is this also normal? i can see no documentation where standby addresses have not been set

i'm still not 100% clear on this

166
Views
0
Helpful
2
Replies