topic asa failover in Network Security

asa failover

Psmurali89 — Tue, 17 Jan 2023 13:35:46 GMT

I got a pair or ASA firewalls in active/standby at office premise. Primary firewall connected to Primary PDU and secondary firewall connected to secondary PDU. We changing the primary PDU. While changing the PDU the primary firewall goes down and the firewall will automatically failover to secondary (which becomes active) and when the primary firewall comes back online i believe there wont be any pre-empt for this firewall to be primary again? In this case the former secondary will be primary and vice versa?

If i need to change it back I just need to say "no failover active" from the current active (secondary) firewall?

Re: asa failover

Rob Ingram — Tue, 17 Jan 2023 13:37:10 GMT

@Psmurali89 correct, there is no preempt. You'd need to manually failback using the command you mentioned.

Re: asa failover

MHM Cisco World — Tue, 17 Jan 2023 13:41:27 GMT

If i need to change it back I just need to say "no failover active" from the current active (secondary) firewall? Yes

for automatic I will check solution using EEM

Re: asa failover

Psmurali89 — Wed, 18 Jan 2023 08:55:32 GMT

Thank you.