topic Re: ASA Failover in Network Security

ASA Failover

henrikj — Mon, 21 Feb 2022 12:12:37 GMT

I have 2 frp 4140 running ASA code.

We run multi-context with ~80 context and active/standby failover.

We shut down the standby unit and moved it to another DC.

During startup of the moved ASA we see some strange issues.

My Active ASA goes directly from Active to Cold standby due to Failover state check.

Does anyone know why this happens ?

Is there a list of scenarios, where i can see what triggers state from active to cold standby ?

Regards Henrik

Re: ASA Failover

Marvin Rhoads — Mon, 21 Feb 2022 12:48:34 GMT

Failover checks are outlined in the following:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/general/asa-98-general-config/ha-failover.html#ID-2107-00000174

With that many contexts and interfaces, a lot of things could influence failover. I would recommend opening a TAC case to have an engineer look at in directly with you.

Re: ASA Failover

henrikj — Mon, 21 Feb 2022 13:07:53 GMT

Hi Marvin

I did look at that document, but it doesn´t mention anything about "cold standby".

I want to know what state that can get a ASA to go from "Active" to "Cold standby".

Regards Henrik

Re: ASA Failover

MHM Cisco World — Mon, 21 Feb 2022 20:08:10 GMT

show failover history <-
any of ASA, and share output here we can after that know why the ASA go to cold standby.
check if the status is due to mismatch config?

Re: ASA Failover

henrikj — Tue, 22 Feb 2022 07:36:22 GMT

hereby the "show failover history":

23:10:07 CET Feb 2 2022
Active Cold Standby Failover state check

23:10:09 CET Feb 2 2022
Cold Standby Sync Config Failover state check

23:37:54 CET Feb 2 2022
Sync Config Sync File System Failover state check

23:37:54 CET Feb 2 2022
Sync File System Bulk Sync Failover state check

23:38:06 CET Feb 2 2022
Bulk Sync Standby Ready Failover state check

Re: ASA Failover

MHM Cisco World — Tue, 22 Feb 2022 19:12:28 GMT

https://quickview.cloudapps.cisco.com/quickview/bug/CSCua13405