topic Hi Aditya, in Network Security

CISCO ASA 5525X FAILOVER FAIL ON VERSION 9.4.2

Salomao Mambo — Tue, 12 Mar 2019 09:44:53 GMT

Hi folks,

I have two cisco asa 5525X active-standby with IOS 9.1.2 with failover. I copy the version 9.4.2 two both devices, for the standby device I issue the command (failover exec mate copy /noconfirm path) but when I reload the standby unit with new IOS I have failover problem, first says the version of active and mate was different, after reload the mate status is Unknown, not detected.

Anyone have the same problem before?

Thanks,

Hi,

Aditya Ganjoo — Thu, 27 Jul 2017 09:47:36 GMT

Hi,

Can you check before reloading the standby device the ASA has the new boot image set.

show run boot

Also what is the ASA model being used?

Regards,

Aditya

Please rate helpful and mark correct answers

Hi Aditya,

Salomao Mambo — Thu, 27 Jul 2017 10:14:27 GMT

Hi Aditya,

Yes I checked show run boot on the active device and shows:

boot system disk0:/asa942-smp-k8.bin
boot system disk0:/asa912-smp-k8.bin

After I reload the standby unit the device wake up with new version but the other (active before reload standby) not take the new version. I reload both of them using the failover reload standby but no failover between both.

I am using ASA 5525X

Hi,

Aditya Ganjoo — Thu, 27 Jul 2017 10:20:48 GMT

Hi,

Please share the show version and show run boot of the affected device.

Try using reload command manually on them instead of failover reload standby.

Regards,

Aditya

Please rate helpful and mark correct answers

There is something strange, I

Salomao Mambo — Thu, 27 Jul 2017 11:15:33 GMT

There is something strange, I logged to standby unit and it show old version but the boot as the new version so I reload manually, after boot I lost communication with the standby unit.

Both of them become an active.

Hi,

Aditya Ganjoo — Thu, 27 Jul 2017 13:24:11 GMT

Hi,

Please check the failover status using the command sh failover status.

Also check if you are able to ping the failover interfaces.

Regards,

Aditya

Please rate helpful and mark correct answers