topic Thank you, in Network Security

ASA multiple context failover monitor failed

Kn1ghtR1d3rOfD00m — Tue, 12 Mar 2019 09:45:20 GMT

Hi,

I have 2 ASAs 5585 boxes with identical images: asa963-1-smp-k8.bin

I have 2 contexts:

but when I run the show failover command, it shows the following:

I see some of them say waiting and not monitored

The failover I think is working, have not tried yet, since the statistic say that is up, but why some

the admin context I have applied the following:

monitor-interface ADMIN-OUT
monitor-interface ADMIN-IN

but the output above shows one CCtx1 is monitored and the other not, but I even havent put the command

the config for the failover is

ASA1

failover
failover lan unit primary
failover lan interface failover GigabitEthernet0/3
failover link failover GigabitEthernet0/3
failover interface ip failover 10.10.10.1 255.255.255.252 standby 10.10.10.2

ASA2

failover
failover lan unit secondary
failover lan interface failover GigabitEthernet0/3
failover link failover GigabitEthernet0/3
failover interface ip failover 10.10.10.1 255.255.255.252 standby 10.10.10.2

Is there something that Im missing?

Regards,

Hi,

Aditya Ganjoo — Sat, 29 Jul 2017 05:06:30 GMT

Hi,

I think the issue is the Admin-IN link on the secondary device which is showing Link down status.

Can you please check the link connectivity and see why it is showing down?

Alternatively, you can try using the command:

no monitor-interface ADMIN-IN

This would bring the failover status as up

Regards,

Aditya

Please rate helpful and correct answers

Thank you,

Kn1ghtR1d3rOfD00m — Sat, 29 Jul 2017 05:56:13 GMT

Thank you,

Let me try and I will let you know, I will keep posted

thanks, the command you

Kn1ghtR1d3rOfD00m — Mon, 14 Aug 2017 04:00:36 GMT

thanks, the command you provided did the trick,

regards