We have two ASA's in Active/Standby mode. We were using static routing on the ASA to reach the subnets off the inside interface but decided to switch over to EIGRP. I got EIGRP working on the active unit but when I removed the static routes from the firewall we lost connectivity to the standby unit. I added the routes back so that I could access it and I noticed that the EIGRP routes were not being learned by the standby unit. After researching this I found out this is due to us not having a stateful link configured in our failover. After configuring this link the standby unit was now seeing dynamic routes so I again attempted to remove the static routes from the active unit. Once again I lost connection to the standby because once the static was removed the standby did not populate it's routing table with the dynamic equivalent route. Here is the process I had to go through to get it to work:
1. Add the static route back to the configuration.
2.Remove the stateful failover link
3. Delete the static route.
4. Add the stateful failover liink back.
When I did this the dynamic route was in the routing table on the standby. Why does the standby unit not update its routing table properly when a stateful link is configured? If there is another static route we want to remove because of an equivalent dynamic route being in the topology table, we have to first remove the stateful link before we delete it.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :