topic Re: How can I access the secondary ASA5505 of a HA pair in Network Security

How can I access the secondary ASA5505 of a HA pair

Cormac Champion — Wed, 12 Jul 2023 08:31:20 GMT

Hi all,

What is probably a simple question, but wih a HA pair, how can I configure the ASA's to be able to access the secondary unit ? Should I simply be Telnetting / SSHing from one to the other to the Failover address ?

Re: How can I access the secondary ASA5505 of a HA pair

Jeet Kumar — Wed, 12 Jul 2023 08:46:56 GMT

ASA software does not include an ssh client. So you cannot ssh to any device from a given ASA - whether or not it is the peer in an HA pair.

You can however execute commands on the standby and get the output. You do this from the primary unit cli with the following command:

failover exec standby <command>

The command output will appear on the screen of the primary unit cli.

Re: How can I access the secondary ASA5505 of a HA pair

MHM Cisco World — Wed, 12 Jul 2023 08:53:45 GMT

If you use mgmt then you need to connect your PC to mgmt interface and use active or standby IP to access ASA

Also you need

Telent 0.0.0.0 mgmt

Case2

Use use

Telent 0.0.0.0 INside

Then you can connect your pc to INside subnet and access active or standby.

What ip I need to use ?

You need to use IP you config in active unit as IP for active and IP for standby

For example

Interface gx/x

Ip add 1.1.1.1 255.255.255.0 standby 1.1.1.2

So active will use 1.1.1.1

Standby will use 1.1.1.2

Re: How can I access the secondary ASA5505 of a HA pair

Marius Gunnerud — Wed, 12 Jul 2023 09:34:53 GMT

to SSH to the standby unit you would need to configure a standby IP on the interface you are using to manage the devices, then SSH to that IP. alternatively you can issue commands on the standby device from the active device using the "failover exec standby ..." command