Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Question regarding A/S Failover on ASA 8.2

Hi All,

I have two ASAs 5510 working fine in Failover. One is Active and the other Standby. If I force a failover with the command ''no failover active'' for example, then the secondary ASA takes over statefully. It works great. The only problem that I have is the following:

I am using one physical interface E0/0 as the outside interface, and three subinterfaces on the physical E0/1 inside interface. The three subinterfaces are not being monitored by failover (they show as normal not monitored as the result of the ''show fail'' command).

The ''show monitor-interface'' shows only the outside and inside interface being monitored by failover. In otherwords, the three subinterfaces are not being monitored. What I'm I missing?

Everything works fine, except the failover is not going to be triggered by any of the subinterfaces. How do I fix it?

Thank you All!

Federico.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Question regarding A/S Failover on ASA 8.2

Hey Federico,

By default, monitoring of physical interfaces is enabled and monitoring of subinterfaces is disabled.You can control which interfaces affect your failover policy by disabling the monitoring of specific interfaces and enabling the monitoring of others. This lets you exclude interfaces attached to less critical networks from affecting your failover policy.

For units in multiple configuration mode, use the following commands to enable or disable health monitoring for specific interfaces:

To disable health monitoring for an interface, enter the following command within a context:

hostname/context(config)# no monitor-interface if_name

To enable health monitoring for an interface, enter the following command within a context:

hostname/context(config)# monitor-interface if_name

For units in single configuration mode as in your case, use the following commands to enable or disable health monitoring for specific interfaces:

To disable health monitoring for an interface, enter the following command in global configuration mode:

hostname(config)# no monitor-interface if_name

To enable health monitoring for an interface, enter the following command in global configuration mode:

hostname(config)# monitor-interface if_name


Hope this helps.

Regards,

Parminder Sian

2 REPLIES

Re: Question regarding A/S Failover on ASA 8.2

Hey Federico,

By default, monitoring of physical interfaces is enabled and monitoring of subinterfaces is disabled.You can control which interfaces affect your failover policy by disabling the monitoring of specific interfaces and enabling the monitoring of others. This lets you exclude interfaces attached to less critical networks from affecting your failover policy.

For units in multiple configuration mode, use the following commands to enable or disable health monitoring for specific interfaces:

To disable health monitoring for an interface, enter the following command within a context:

hostname/context(config)# no monitor-interface if_name

To enable health monitoring for an interface, enter the following command within a context:

hostname/context(config)# monitor-interface if_name

For units in single configuration mode as in your case, use the following commands to enable or disable health monitoring for specific interfaces:

To disable health monitoring for an interface, enter the following command in global configuration mode:

hostname(config)# no monitor-interface if_name

To enable health monitoring for an interface, enter the following command in global configuration mode:

hostname(config)# monitor-interface if_name


Hope this helps.

Regards,

Parminder Sian

Re: Question regarding A/S Failover on ASA 8.2

worked like a charm!!!

Thanks!!!

763
Views
0
Helpful
2
Replies