ACTIVE ACTIVE asa problem

prestigio391 — Mon, 30 Nov 2020 13:22:56 GMT

Hello guys,

I have 2x ASA 5545c in cluster mode in ACTIVE/ACTIVE mode. Problem is when one unit goes down ASA stop advertising route via OSPF to ASR 1001X router.

As you can see in output i can see ASAs MAC addresse from ASR but after failover arp isnt updated.Another problem is this problem is only on one context from 76 contexts terminated on ASA...

Router output have :

Bridge-domain 2268 (2 ports in all)
State: UP Mac learning: Enabled
Aging-Timer: 300 second(s)
BDI2268 (up)
Port-channel1 service instance 2268
AED MAC address Policy Tag Age Pseudoport
0 0049.0112.2268 forward dynamic 278 Port-channel1.EFP2268 ---->ASA
0 00A5.0101.2268 forward dynamic 296 Port-channel1.EFP2268
- 00B1.0101.2268 to_bdi static 0 BDI2268
0 0049.0212.2268 forward dynamic 300 Port-channel1.EFP2268---->ASA

DT1B18RTR01#sh ip arp vrf xxxxxx
Protocol Address Age (min) Hardware Addr Type Interface
Internet 100.73.225.17 0 0049.0212.2268 ARPA BDI2268---->ASA
Internet 100.73.225.22 - 00b1.0101.2268 ARPA BDI2268
Internet 100.73.225.23 1 00a5.0101.2268 ARPA BDI2268

sh ip ospf nei

100.73.225.17 0 FULL/DROTHER 00:00:35 100.73.225.17 BDI2268
100.73.225.23 3 FULL/DR 00:00:34 100.73.225.23 BDI2268

topic ACTIVE ACTIVE asa problem in Network Security

ACTIVE ACTIVE asa problem