cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5376
Views
0
Helpful
5
Replies

ASA preempt ?

Gerard Gacusan
Level 1
Level 1

I have ASA active/standby setup. Seems, when the active fail, it won't preempt to an active state when it becomes available again ... just like HSRP. Is it possible?

thanks,

gerard

5 Replies 5

JORGE RODRIGUEZ
Level 10
Level 10

Gerard, you need to implement preempt command.

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/p.html#wp1885649

Rgds

Jorge

Jorge Rodriguez

I have no option on failover group ...not sure why? I'm using IPSEC plus license.

ASA-Firewall(config)# failover ?

configure mode commands/options:

interface

interface-policy

key

link

mac

polltime

timeout

exec mode commands/options:

active

exec

reload-standby

reset

use this link

this one for ACTIVE/ACTIVE failover

but u rae useing active/standby

so use this linke as a config refrence and only configure one group in the example group one

then u gonna be able to use the preempt command

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml

good luck

please, if helpful rate

I remember now and the reason I have no failover group option. I'm running a single mode.

great help guys and your responses, i will try but no worries this is still in test environment.

I'm still trying to figure out with the config..attach is my current config. anybody has a quick config that can show to us with the preempt?

this attachment is in a Active/Standby and running in single mode.

thanks in advance ...

gerard