Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

cannot telnet to standby asa

Hi all

Is there any reason why I wouldnt be able to telnet to my standby asa? I can ping it from the other ASA fine,via the lan interface, but I cannot ping it from other subnets, should I be able to get to both firewalls for management in the active/standby config ?

cheers

Carl

3 REPLIES
Cisco Employee

Re: cannot telnet to standby asa

Yes, you should be able to telnet to the standby ASA.

What does "show failover" show? Where are you trying to telnet to the standby ASA from?

New Member

Re: cannot telnet to standby asa

Hi There

it appearred to be a routing issue, the firewalls were using eigrp to the next hop, I install a static route on them and this fixed the issue.

Carl

Cisco Employee

Re: cannot telnet to standby asa

Hello Carl

You are right, and just to backup your answer, here is the information about stateful failover, it says that no routing table information will be passed to the secondary unit,

The information that is not passed to the standby unit when stateful       failover is enabled includes these:

  • The HTTP connection table (unless HTTP replication is           enabled)

  • The user authentication (uauth) table

  • The routing tables

  • State information for security service           modules


That would also cause extra delay when doing failover as the routing protocol would need to re-calculate the routes in order to populate the routing table

Here is the document in case you need it

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml#statef

Thanks and I am glad that you were able to solve it.

Cheers.

Mike

Mike
292
Views
0
Helpful
3
Replies
CreatePlease to create content