topic Re: no failover active command is not working as expected in Network Security https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200473#M1116144 <P>There is issue with failover link&nbsp;</P> <P>Do you connect failover link back to back or via SW?</P> <P>MHM</P> Sun, 29 Sep 2024 06:14:44 GMT MHM Cisco World 2024-09-29T06:14:44Z no failover active command is not working as expected https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200464#M1116142 <P>I have ASA with Active/Standby configuration. I can see the primary is active and the secondary is standby ready. also, the configuration is replicated.&nbsp;</P> <P>When I try the command "no failover active" to make the active work as standby, in order to go with the upgrade steps. It does not work as expected. I can see the SSH session terminated. But when I connect to the session again I can see there is no changes from the&nbsp; active/standby wise. The active ASA remains active and the standby stays standby.&nbsp;</P> Sun, 29 Sep 2024 05:43:26 GMT https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200464#M1116142 AhmadKhader 2024-09-29T05:43:26Z Re: no failover active command is not working as expected https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200473#M1116144 <P>There is issue with failover link&nbsp;</P> <P>Do you connect failover link back to back or via SW?</P> <P>MHM</P> Sun, 29 Sep 2024 06:14:44 GMT https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200473#M1116144 MHM Cisco World 2024-09-29T06:14:44Z Re: no failover active command is not working as expected https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200474#M1116145 <P>Directly connected.&nbsp;</P> Sun, 29 Sep 2024 06:27:10 GMT https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200474#M1116145 AhmadKhader 2024-09-29T06:27:10Z Re: no failover active command is not working as expected https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200484#M1116148 <P>Share&nbsp;</P> <P>Show failover&nbsp;</P> <P>Show failover state&nbsp;</P> <P>Before run command abd after for both unit</P> <P>MHM</P> Sun, 29 Sep 2024 06:48:11 GMT https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200484#M1116148 MHM Cisco World 2024-09-29T06:48:11Z Re: no failover active command is not working as expected https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200487#M1116149 <P>Sorry, it is connected over the network.&nbsp;<BR /><BR />Should I collect the same outputs?&nbsp;</P> Sun, 29 Sep 2024 06:53:42 GMT https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200487#M1116149 AhmadKhader 2024-09-29T06:53:42Z Re: no failover active command is not working as expected https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200490#M1116150 <P>So it not direct?</P> <P>İf yes&nbsp;</P> <P>Share output of above and also share</P> <P>Show interface IP brief</P> <P>MHM</P> Sun, 29 Sep 2024 07:01:10 GMT https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200490#M1116150 MHM Cisco World 2024-09-29T07:01:10Z Re: no failover active command is not working as expected https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200518#M1116151 <P>Before the command:&nbsp;</P> <DIV>show failover&nbsp;</DIV> <DIV>Failover On&nbsp;</DIV> <DIV>Failover unit Primary</DIV> <DIV>Failover LAN Interface: Failover GigabitEthernet1/8 (up)</DIV> <DIV>Reconnect timeout 0:00:00</DIV> <DIV>Unit Poll frequency 1 seconds, holdtime 15 seconds</DIV> <DIV>Interface Poll frequency 3 seconds, holdtime 15 seconds</DIV> <DIV>Interface Policy 1</DIV> <DIV>Monitored Interfaces 1 of 160 maximum</DIV> <DIV>MAC Address Move Notification Interval not set</DIV> <DIV>Version: Ours 9.8(2)20, Mate 9.8(2)20</DIV> <DIV>Serial Number: Ours JAD1948072L, Mate JAD2003056A</DIV> <DIV>Last Failover at: 10:30:00 AST Sep 29 2024</DIV> <DIV><SPAN> This host: Primary - Active&nbsp;</SPAN></DIV> <DIV><SPAN> Active time: 1722 (sec)</SPAN></DIV> <DIV><SPAN> slot 1: ASA5516 hw/sw rev (3.1/9.8(2)20) status (Up Sys)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface outside (213.186.170.183): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface inside (10.100.10.4): Normal (Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface management (0.0.0.0): No Link (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> Other host: Secondary - Standby Ready&nbsp;</SPAN></DIV> <DIV><SPAN> Active time: 0 (sec)</SPAN></DIV> <DIV><SPAN> slot 1: ASA5516 hw/sw rev (3.1/9.8(2)20) status (Up Sys)</SPAN></DIV> <DIV>&lt;--- More ---&gt;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</DIV> <DIV><SPAN> &nbsp; Interface outside (0.0.0.0): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface inside (10.100.10.5): Normal (Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface management (0.0.0.0): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>Stateful Failover Logical Update Statistics</DIV> <DIV><SPAN> Link : Failover GigabitEthernet1/8 (up)</SPAN></DIV> <DIV><SPAN> Stateful Obj xmit&nbsp; &nbsp; &nbsp; &nbsp;xerr&nbsp; &nbsp; &nbsp; &nbsp;rcv&nbsp; &nbsp; &nbsp; &nbsp; rerr&nbsp; &nbsp; &nbsp;&nbsp;</SPAN></DIV> <DIV><SPAN> General 66810&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 2704713&nbsp; &nbsp; 33092&nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> sys cmd&nbsp; 32477&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 32476&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> up time&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> RPC services&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> TCP conn 18808&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 962690&nbsp; &nbsp; &nbsp;18510&nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> UDP conn 14032&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1540737&nbsp; &nbsp; 14582&nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> ARP tbl&nbsp; 916&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 147504&nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Xlate_Timeout&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> IPv6 ND tbl&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv1 SA 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv1 P2 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv2 SA 7&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 13562&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv2 P2 8&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 176&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV>&lt;--- More ---&gt;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</DIV> <DIV><SPAN> VPN CTCP upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN SDI upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN DHCP upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Session 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Tx 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Pinhole 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Route Session 27&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Router ID 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> User-Identity 535&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 7567&nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> CTS SGTNAME 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> CTS PAC 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> TrustSec-SXP 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> IPv6 Route 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> STS Table 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> Logical Update Queue Information</SPAN></DIV> <DIV><SPAN> Cur Max Total</SPAN></DIV> <DIV><SPAN> Recv Q: 0 37 4592432</SPAN></DIV> <DIV><SPAN> Xmit Q: 0 731 82267</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> show failover state&nbsp;</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;State&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Last Failure Reason&nbsp; &nbsp; &nbsp; Date/Time</DIV> <DIV>This host&nbsp; -&nbsp; &nbsp;Primary</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Active&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;None</DIV> <DIV>Other host -&nbsp; &nbsp;Secondary</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Standby Ready&nbsp; Comm Failure&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;10:52:00 AST Sep 29 2024</DIV> <DIV>&nbsp;</DIV> <DIV>====Configuration State===</DIV> <DIV><SPAN> Sync Done</SPAN></DIV> <DIV><SPAN> Sync Done - STANDBY</SPAN></DIV> <DIV>====Communication State===</DIV> <DIV><SPAN> Mac set<BR /></SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>After the command:&nbsp;</SPAN></DIV> <DIV> <DIV>sh failover&nbsp;</DIV> <DIV>Failover On&nbsp;</DIV> <DIV>Failover unit Secondary</DIV> <DIV>Failover LAN Interface: Failover GigabitEthernet1/8 (up)</DIV> <DIV>Reconnect timeout 0:00:00</DIV> <DIV>Unit Poll frequency 1 seconds, holdtime 15 seconds</DIV> <DIV>Interface Poll frequency 3 seconds, holdtime 15 seconds</DIV> <DIV>Interface Policy 1</DIV> <DIV>Monitored Interfaces 1 of 160 maximum</DIV> <DIV>MAC Address Move Notification Interval not set</DIV> <DIV>Version: Ours 9.8(2)20, Mate 9.8(2)20</DIV> <DIV>Serial Number: Ours JAD2003056A, Mate JAD1948072L</DIV> <DIV>Last Failover at: 10:59:23 AST Sep 29 2024</DIV> <DIV><SPAN> This host: Secondary - Active&nbsp;</SPAN></DIV> <DIV><SPAN> Active time: 37 (sec)</SPAN></DIV> <DIV><SPAN> slot 1: ASA5516 hw/sw rev (3.1/9.8(2)20) status (Up Sys)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface outside (213.186.170.183): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface inside (10.100.10.4): Normal (Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface management (0.0.0.0): No Link (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> Other host: Primary - Standby Ready&nbsp;</SPAN></DIV> <DIV><SPAN> Active time: 1763 (sec)</SPAN></DIV> <DIV><SPAN> slot 1: ASA5516 hw/sw rev (3.1/9.8(2)20) status (Up Sys)</SPAN></DIV> <DIV>&lt;--- More ---&gt;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</DIV> <DIV><SPAN> &nbsp; Interface outside (0.0.0.0): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface inside (10.100.10.5): Normal (Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface management (0.0.0.0): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>Stateful Failover Logical Update Statistics</DIV> <DIV><SPAN> Link : Failover GigabitEthernet1/8 (up)</SPAN></DIV> <DIV><SPAN> Stateful Obj xmit&nbsp; &nbsp; &nbsp; &nbsp;xerr&nbsp; &nbsp; &nbsp; &nbsp;rcv&nbsp; &nbsp; &nbsp; &nbsp; rerr&nbsp; &nbsp; &nbsp;&nbsp;</SPAN></DIV> <DIV><SPAN> General 1098&nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 5826&nbsp; &nbsp; &nbsp; &nbsp;1088&nbsp; &nbsp; &nbsp;&nbsp;</SPAN></DIV> <DIV><SPAN> sys cmd&nbsp; 37&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 37&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> up time&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> RPC services&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> TCP conn 531&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 3165&nbsp; &nbsp; &nbsp; &nbsp;971&nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> UDP conn 370&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 2096&nbsp; &nbsp; &nbsp; &nbsp;117&nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> ARP tbl&nbsp; 24&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 150&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Xlate_Timeout&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> IPv6 ND tbl&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv1 SA 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv1 P2 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv2 SA 4&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv2 P2 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV>&lt;--- More ---&gt;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</DIV> <DIV><SPAN> VPN CTCP upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN SDI upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN DHCP upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Session 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Tx 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Pinhole 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Route Session 22&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Router ID 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> User-Identity 110&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 377&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> CTS SGTNAME 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> CTS PAC 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> TrustSec-SXP 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> IPv6 Route 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> STS Table 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> Logical Update Queue Information</SPAN></DIV> <DIV><SPAN> Cur Max Total</SPAN></DIV> <DIV><SPAN> Recv Q: 0 17 9224</SPAN></DIV> <DIV><SPAN> Xmit Q: 0 5 1495</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> sh failover state&nbsp;</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;State&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Last Failure Reason&nbsp; &nbsp; &nbsp; Date/Time</DIV> <DIV>This host&nbsp; -&nbsp; &nbsp;Secondary</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Active&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;None</DIV> <DIV>Other host -&nbsp; &nbsp;Primary</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Standby Ready&nbsp; None</DIV> <DIV>&nbsp;</DIV> <DIV>====Configuration State===</DIV> <DIV><SPAN> &nbsp;&nbsp;</SPAN></DIV> <DIV><SPAN> Sync Done - STANDBY</SPAN></DIV> <DIV>====Communication State===</DIV> <DIV><SPAN> Mac set</SPAN></DIV> </DIV> Sun, 29 Sep 2024 08:50:15 GMT https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200518#M1116151 AhmadKhader 2024-09-29T08:50:15Z Re: no failover active command is not working as expected https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200525#M1116152 <P>May be worth post what ASA code running, some failover outputs.</P> <P>check my blog some testing's - if all ok.</P> <P><A href="https://www.balajibandi.com/?p=244" target="_blank">https://www.balajibandi.com/?p=244</A></P> Sun, 29 Sep 2024 09:57:17 GMT https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200525#M1116152 balaji.bandi 2024-09-29T09:57:17Z Re: no failover active command is not working as expected https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200529#M1116155 <P>- Before the command:&nbsp;</P> <DIV>show failover&nbsp;</DIV> <DIV>Failover On&nbsp;</DIV> <DIV>Failover unit Primary</DIV> <DIV>Failover LAN Interface: Failover GigabitEthernet1/8 (up)</DIV> <DIV>Reconnect timeout 0:00:00</DIV> <DIV>Unit Poll frequency 1 seconds, holdtime 15 seconds</DIV> <DIV>Interface Poll frequency 3 seconds, holdtime 15 seconds</DIV> <DIV>Interface Policy 1</DIV> <DIV>Monitored Interfaces 1 of 160 maximum</DIV> <DIV>MAC Address Move Notification Interval not set</DIV> <DIV>Version: Ours 9.8(2)20, Mate 9.8(2)20</DIV> <DIV>Serial Number: Ours JAD1948072L, Mate JAD2003056A</DIV> <DIV>Last Failover at: 10:30:00 AST Sep 29 2024</DIV> <DIV><SPAN> This host: Primary - Active&nbsp;</SPAN></DIV> <DIV><SPAN> Active time: 1722 (sec)</SPAN></DIV> <DIV><SPAN> slot 1: ASA5516 hw/sw rev (3.1/9.8(2)20) status (Up Sys)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface outside (213.186.170.183): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface inside (10.100.10.4): Normal (Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface management (0.0.0.0): No Link (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> Other host: Secondary - Standby Ready&nbsp;</SPAN></DIV> <DIV><SPAN> Active time: 0 (sec)</SPAN></DIV> <DIV><SPAN> slot 1: ASA5516 hw/sw rev (3.1/9.8(2)20) status (Up Sys)</SPAN></DIV> <DIV>&lt;--- More ---&gt;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</DIV> <DIV><SPAN> &nbsp; Interface outside (0.0.0.0): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface inside (10.100.10.5): Normal (Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface management (0.0.0.0): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>Stateful Failover Logical Update Statistics</DIV> <DIV><SPAN> Link : Failover GigabitEthernet1/8 (up)</SPAN></DIV> <DIV><SPAN> Stateful Obj xmit&nbsp; &nbsp; &nbsp; &nbsp;xerr&nbsp; &nbsp; &nbsp; &nbsp;rcv&nbsp; &nbsp; &nbsp; &nbsp; rerr&nbsp; &nbsp; &nbsp;&nbsp;</SPAN></DIV> <DIV><SPAN> General 66810&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 2704713&nbsp; &nbsp; 33092&nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> sys cmd&nbsp; 32477&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 32476&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> up time&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> RPC services&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> TCP conn 18808&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 962690&nbsp; &nbsp; &nbsp;18510&nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> UDP conn 14032&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1540737&nbsp; &nbsp; 14582&nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> ARP tbl&nbsp; 916&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 147504&nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Xlate_Timeout&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> IPv6 ND tbl&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv1 SA 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv1 P2 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv2 SA 7&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 13562&nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv2 P2 8&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 176&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV>&lt;--- More ---&gt;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</DIV> <DIV><SPAN> VPN CTCP upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN SDI upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN DHCP upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Session 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Tx 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Pinhole 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Route Session 27&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Router ID 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> User-Identity 535&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 7567&nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> CTS SGTNAME 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> CTS PAC 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> TrustSec-SXP 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> IPv6 Route 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> STS Table 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> Logical Update Queue Information</SPAN></DIV> <DIV><SPAN> Cur Max Total</SPAN></DIV> <DIV><SPAN> Recv Q: 0 37 4592432</SPAN></DIV> <DIV><SPAN> Xmit Q: 0 731 82267</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> show failover state&nbsp;</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;State&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Last Failure Reason&nbsp; &nbsp; &nbsp; Date/Time</DIV> <DIV>This host&nbsp; -&nbsp; &nbsp;Primary</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Active&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;None</DIV> <DIV>Other host -&nbsp; &nbsp;Secondary</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Standby Ready&nbsp; Comm Failure&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;10:52:00 AST Sep 29 2024</DIV> <DIV>&nbsp;</DIV> <DIV>====Configuration State===</DIV> <DIV><SPAN> Sync Done</SPAN></DIV> <DIV><SPAN> Sync Done - STANDBY</SPAN></DIV> <DIV>====Communication State===</DIV> <DIV><SPAN> Mac set</SPAN></DIV> <P>-After applying the command:&nbsp;</P> <DIV>sh failover&nbsp;</DIV> <DIV>Failover On&nbsp;</DIV> <DIV>Failover unit Secondary</DIV> <DIV>Failover LAN Interface: Failover GigabitEthernet1/8 (up)</DIV> <DIV>Reconnect timeout 0:00:00</DIV> <DIV>Unit Poll frequency 1 seconds, holdtime 15 seconds</DIV> <DIV>Interface Poll frequency 3 seconds, holdtime 15 seconds</DIV> <DIV>Interface Policy 1</DIV> <DIV>Monitored Interfaces 1 of 160 maximum</DIV> <DIV>MAC Address Move Notification Interval not set</DIV> <DIV>Version: Ours 9.8(2)20, Mate 9.8(2)20</DIV> <DIV>Serial Number: Ours JAD2003056A, Mate JAD1948072L</DIV> <DIV>Last Failover at: 10:59:23 AST Sep 29 2024</DIV> <DIV><SPAN> This host: Secondary - Active&nbsp;</SPAN></DIV> <DIV><SPAN> Active time: 37 (sec)</SPAN></DIV> <DIV><SPAN> slot 1: ASA5516 hw/sw rev (3.1/9.8(2)20) status (Up Sys)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface outside (213.186.170.183): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface inside (10.100.10.4): Normal (Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface management (0.0.0.0): No Link (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> Other host: Primary - Standby Ready&nbsp;</SPAN></DIV> <DIV><SPAN> Active time: 1763 (sec)</SPAN></DIV> <DIV><SPAN> slot 1: ASA5516 hw/sw rev (3.1/9.8(2)20) status (Up Sys)</SPAN></DIV> <DIV>&lt;--- More ---&gt;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</DIV> <DIV><SPAN> &nbsp; Interface outside (0.0.0.0): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface inside (10.100.10.5): Normal (Monitored)</SPAN></DIV> <DIV><SPAN> &nbsp; Interface management (0.0.0.0): Normal (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV><SPAN> slot 2: SFR5516 hw/sw rev (N/A/5.4.1-211) status (Up/Up)</SPAN></DIV> <DIV><SPAN> &nbsp; ASA FirePOWER, 5.4.1-211, Up, (Not-Monitored)</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>Stateful Failover Logical Update Statistics</DIV> <DIV><SPAN> Link : Failover GigabitEthernet1/8 (up)</SPAN></DIV> <DIV><SPAN> Stateful Obj xmit&nbsp; &nbsp; &nbsp; &nbsp;xerr&nbsp; &nbsp; &nbsp; &nbsp;rcv&nbsp; &nbsp; &nbsp; &nbsp; rerr&nbsp; &nbsp; &nbsp;&nbsp;</SPAN></DIV> <DIV><SPAN> General 1098&nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 5826&nbsp; &nbsp; &nbsp; &nbsp;1088&nbsp; &nbsp; &nbsp;&nbsp;</SPAN></DIV> <DIV><SPAN> sys cmd&nbsp; 37&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 37&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> up time&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> RPC services&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> TCP conn 531&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 3165&nbsp; &nbsp; &nbsp; &nbsp;971&nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> UDP conn 370&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 2096&nbsp; &nbsp; &nbsp; &nbsp;117&nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> ARP tbl&nbsp; 24&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 150&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Xlate_Timeout&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> IPv6 ND tbl&nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv1 SA 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv1 P2 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv2 SA 4&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN IKEv2 P2 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV>&lt;--- More ---&gt;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</DIV> <DIV><SPAN> VPN CTCP upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN SDI upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> VPN DHCP upd 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Session 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Tx 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> SIP Pinhole 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Route Session 22&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> Router ID 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> User-Identity 110&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 377&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> CTS SGTNAME 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> CTS PAC 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> TrustSec-SXP 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> IPv6 Route 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV><SPAN> STS Table 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> Logical Update Queue Information</SPAN></DIV> <DIV><SPAN> Cur Max Total</SPAN></DIV> <DIV><SPAN> Recv Q: 0 17 9224</SPAN></DIV> <DIV><SPAN> Xmit Q: 0 5 1495</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN> sh failover state&nbsp;</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;State&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Last Failure Reason&nbsp; &nbsp; &nbsp; Date/Time</DIV> <DIV>This host&nbsp; -&nbsp; &nbsp;Secondary</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Active&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;None</DIV> <DIV>Other host -&nbsp; &nbsp;Primary</DIV> <DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Standby Ready&nbsp; None</DIV> <DIV>&nbsp;</DIV> <DIV>====Configuration State===</DIV> <DIV><SPAN> Sync Done - STANDBY</SPAN></DIV> <DIV>====Communication State===</DIV> <DIV><SPAN> Mac set</SPAN></DIV> Sun, 29 Sep 2024 10:23:39 GMT https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5200529#M1116155 AhmadKhader 2024-09-29T10:23:39Z Re: no failover active command is not working as expected https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5202203#M1116236 <P>Based on the output you shared it seems to work as expected?</P> <P>- Before the command:</P> <P>show failover <BR />Failover On <BR /><STRONG>Failover unit Primary</STRONG><BR />Failover LAN Interface: Failover GigabitEthernet1/8 (up)<BR />Reconnect timeout 0:00:00<BR />Unit Poll frequency 1 seconds, holdtime 15 seconds<BR />Interface Poll frequency 3 seconds, holdtime 15 seconds<BR />Interface Policy 1<BR />Monitored Interfaces 1 of 160 maximum<BR />MAC Address Move Notification Interval not set<BR />Version: Ours 9.8(2)20, Mate 9.8(2)20<BR /><STRONG>Serial Number: Ours JAD1948072L, Mate JAD2003056A</STRONG><BR />Last Failover at: 10:30:00 AST Sep 29 2024<BR /><STRONG>This host: Primary - Active</STRONG></P> <P><BR />-After applying the command:</P> <P>sh failover <BR />Failover On <BR /><STRONG>Failover unit Secondary</STRONG><BR />Failover LAN Interface: Failover GigabitEthernet1/8 (up)<BR />Reconnect timeout 0:00:00<BR />Unit Poll frequency 1 seconds, holdtime 15 seconds<BR />Interface Poll frequency 3 seconds, holdtime 15 seconds<BR />Interface Policy 1<BR />Monitored Interfaces 1 of 160 maximum<BR />MAC Address Move Notification Interval not set<BR />Version: Ours 9.8(2)20, Mate 9.8(2)20<BR /><STRONG>Serial Number: Ours JAD2003056A, Mate JAD1948072L</STRONG><BR />Last Failover at: 10:59:23 AST Sep 29 2024<BR /><STRONG>This host: Secondary - Active</STRONG></P> <P>After you applied the "no failover active" command, the output shows that the local active firewall is actually the secondary firewall which has also a different serial number.</P> <P>One command can be handy with ASA failover is "prompt hostname priority state". If you apply this command, you can then see the hostname and the failover state on CLI.</P> Wed, 02 Oct 2024 09:20:20 GMT https://community.cisco.com/t5/network-security/no-failover-active-command-is-not-working-as-expected/m-p/5202203#M1116236 Aref Alsouqi 2024-10-02T09:20:20Z