Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Replacing Failover cables in a production HA Setup

Hello,

When you need to bring down the Failover lan and state interfaces (ie, to replace cabling), what would be the best steps in order to prevent downtime, in a production environment?

If I unplug the failover cabling, how can I prevent both firewalls from going Active, assuming the other ASA is down? Will monitoring the 'inside' interface on both ASAs prevent this, so long as they can still reach each other?

Thanks.

  • Firewalling
1 ACCEPTED SOLUTION

Accepted Solutions
VIP Green

Replacing Failover cables in a production HA Setup

If there is no connection via the failover and state links the ASA will send test packets out its monitored interfaces to make sure there really is no connection to the standby ASA.  If the ASA gets a reply from the standby on the monitored interface failover will not occur.

So you should be ok when swapping the cables.

--
Please remember to rate and select a correct answer

-- Please remember to rate and select a correct answer
2 REPLIES
VIP Green

Replacing Failover cables in a production HA Setup

If there is no connection via the failover and state links the ASA will send test packets out its monitored interfaces to make sure there really is no connection to the standby ASA.  If the ASA gets a reply from the standby on the monitored interface failover will not occur.

So you should be ok when swapping the cables.

--
Please remember to rate and select a correct answer

-- Please remember to rate and select a correct answer
New Member

Replacing Failover cables in a production HA Setup

Okay, as I suspected. Thank you for the confirmation!

80
Views
0
Helpful
2
Replies
This widget could not be displayed.