Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

make secondary ASA the new Primary and active asa

We have two cisco asa 5510's in a failover setup.

I'd like to take the secondary/failover and make it the primary/active and do this for good..not just for testing. And of course make the other the new secondary/failover.

What would be the best way of doing this? What config do I need to change?

To sum it up, Id like to swap the units from primary to secondary and vice versa.

Everyone's tags (2)
4 REPLIES
VIP Green

Just issue the command "no

Just issue the command "no failover active" on the primary ASA.  The secondary unit will now be the primary/active unit and will remain that way until another failover situation occurs.

--

Please remember to select a correct answer and rate helpful posts

--

Please remember to rate and select a correct answer

hi,marius is correct.you

hi,

marius is correct.

you could alternatively do this via ASDM.

click on Make Standby button.

see screenshot attached.

Re: hi,marius is correct.you

Primary will be always primary and secondary will be always secondary.., only you can change the Active and standby mode. after putting "failover active" on standby unit, it will become Secondary/Active and other will be primary/Standby.

 

Regards,

Saurabh 

Hall of Fame Super Silver

Re: make secondary ASA the new Primary and active asa

Is you want to change the role and not just the state, you will need to make the failover unit Secondary-Active as others have described. Then take the Primary-Standby offline. Modify the Secondary-Active configuration to designate it as Primary and the (offline) Primary unit to make it Secondary. Then bring the former Primary (newly designated Secondary) back online.

 

The bigger question is why go the the trouble? The designation is purely cosmetic in 99% of the use cases.

1580
Views
5
Helpful
4
Replies
CreatePlease login to create content