Can I use the ASA management Interface for Failover ?

[harpritsingh]

Frnds,

Just a quick Question

Cisco site states that "The ASA 5510 and higher adaptive security appliance includes a dedicated management interface called Management 0/0, which is meant to support traffic to the security appliance. However, you can configure any interface to be a management-only interface using the management-only command. Also, for Management 0/0, you can disable management-only mode so the interface can pass through traffic just like any other interface"

So if I disable the management-only mode using the following commands.

hostname(config)# interface management0/0

hostname(config-if)# no management-only

Will I be able to use the Management Interface for Failover purposes ?

[jwalker · Accepted solution]

Yes. It works the exact same as if you used a normal interface. Here's a sample of one I did..

interface Management0/0

description LAN/STATE Failover Interface

failover

failover lan unit primary

failover lan interface fail Management0/0

failover polltime unit 5 holdtime 15

failover key *****

failover link fail Management0/0

failover interface ip fail 10.255.255.1 255.255.255.252 standby 10.255.255.2

Pls rate if this helps.

Cheers.

[harpritsingh]

Thanks alot jwalker

[jim]

Just a side note. Cisco does not support this. If you have a high rate of xlates and connections it will fall behind while trying to Synchronize on a 100mb link causing other problems.

Just an FYI..

BTW we use the management port for failover :)

[harpritsingh]

Thanks for that little bit of info