topic Re: ASA Cable Based Failover in Network Security

ASA Cable Based Failover

acharyr123 — Mon, 11 Mar 2019 10:35:59 GMT

Hi,

If i connect 2 ASA 5510 with cross cable & configure failover on the active one, whether failove rtake place??

PLease advice.

Re: ASA Cable Based Failover

vitripat — Tue, 26 Jun 2007 17:33:28 GMT

You need to configure failover on ASAs based on following link-

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_2/conf_gd/general/failover.htm#wp1064158

You can connect the "failover" link interfaces directly using a cross cable.

Regards,

Vibhor.

Re: ASA Cable Based Failover

acharyr123 — Wed, 27 Jun 2007 03:04:56 GMT

Hi,

In the document i can find it shows Configuring Cable-Based Active/Standby Failover (PIX Security Appliance Only) using the failover cable. have u practically done connecting 2 asa using a cross cable?

please find the commands:

>>hostname(config-if)# ip address active_addr netmask standby standby_addr

say: ip address 10.10.10.1 255.255.255.240 standby 10.10.10.2 ()say this is for eth0/1)

>> failover link if_name phy_if

say: failover link failover eth0/2

>>failover interface ip if_name ip_addr mask standby ip_addr

say: failover interface ip failover 192.168.10.1 255.255.255.240 standby 192.168.10.2

>> hostname(config)# interface eth0/2

>> hostname(config-if)# no shutdown

>>failover

all these are on active one.

=============================================

Standby:

=============================================

hostname(config)# failover

hostname(config)# wr mem

Whether it will solve the purpose.

Rgds..Partha

Re: ASA Cable Based Failover

vitripat — Wed, 27 Jun 2007 14:12:52 GMT

Hello Partha,

Lets say you want to use ethernet0/1 for failover link. Connect e0/1 interfaces of both ASAs using

cross cable. Now you need to implement following commands-

On Primary ASA:

interface e0/1

no shutdown

failover lan unit primary

failover lan interface failover_link ethernet0/1

failover interface ip failover_link 192.168.10.1 255.255.255.240 standby 192.168.10.2

failover lan enable

failover

On Secondary ASA:

interface e0/1

no shutdown

failover lan unit secondary

failover lan interface failover_link ethernet0/1

failover interface ip failover_link 192.168.10.1 255.255.255.240 standby 192.168.10.2

failover lan enable

failover

Note: On ASAs there is no cable-based failover available. We need to configure LAN-based failover only.

Hope this helps.

Regards,

Vibhor.