topic Re: ASA failover key in Network Security

ASA failover key

N3t W0rK3r — Fri, 21 Feb 2020 16:12:22 GMT

Can I issue the "failover key" on an active ASA in an A/S HA pair without impacting service? How would I get this command onto the other ASA because I assume that as soon as I issue the command on the active unit, I will break the failover pair and lose access to the standby unit.

Thanks in advance.

John

Re: ASA failover key

Ajay Saini — Fri, 07 Sep 2018 01:57:33 GMT

Hi John,

It would be recommended to add the failover in a controlled maintenance window even if you have out-of-band access to both devices.

The failover key needs to be added to both devices simultaneously, I mean add to both and execute almost at same time(press enter). Better do in a maintenance window, but from a functionality perspective, there is no such document which states that this can or can not be done during normal working hours.

As a good practice, any failover process related options should be planned.

FYI, I have seen people doing it on the fly and being successful, but its a call that you have to take.

HTH
AJ

Re: ASA failover key

Alex Pfeil — Fri, 07 Sep 2018 13:01:15 GMT

I agree that any change should be completed during maintenance window.