topic Need Help with ASA Failover issues in Network Security

Need Help with ASA Failover issues

takroeker — Tue, 12 Mar 2019 09:13:35 GMT

getting service card failure and VPN freezes up about once a month.

ASA5525X/pri/act# sh failover his
==========================================================================
From State To State Reason
==========================================================================
15:47:43 CDT Feb 14 2017
Just Active Active Drain Service card in other unit has failed

15:47:43 CDT Feb 14 2017
Active Drain Active Applying Config Service card in other unit has failed

15:47:43 CDT Feb 14 2017
Active Applying Config Active Config Applied Service card in other unit has failed

15:47:43 CDT Feb 14 2017
Active Config Applied Active Service card in other unit has failed

23:00:05 CDT Mar 3 2017
Active Standby Ready Other unit wants me Standby

23:00:05 CDT Mar 3 2017
Standby Ready Failed Detect service card failure

23:00:13 CDT Mar 3 2017
Failed Standby Ready My service card is as good as peer

09:54:48 CDT Mar 4 2017
Standby Ready Just Active Service card in other unit has failed

09:54:48 CDT Mar 4 2017
Just Active Active Drain Service card in other unit has failed

09:54:48 CDT Mar 4 2017
Active Drain Active Applying Config Service card in other unit has failed

09:54:48 CDT Mar 4 2017
Active Applying Config Active Config Applied Service card in other unit has failed

09:54:48 CDT Mar 4 2017
Active Config Applied Active Service card in other unit has failed

09:01:21 CDT Apr 3 2017
Active Standby Ready Other unit wants me Standby

09:01:22 CDT Apr 3 2017
Standby Ready Failed Detect service card failure

Can you please paste show

ajay chauhan — Sat, 15 Apr 2017 02:27:24 GMT

Can you please paste show version ? I remember reading a post this was due to bugs and software upgrade was recommended.

Ajay

Version: Ours 9.5(2), Mate 9

takroeker — Sat, 15 Apr 2017 17:25:14 GMT

Version: Ours 9.5(2), Mate 9.5(2)

Please paste the Version of

Akhil.Balachandran — Mon, 17 Apr 2017 15:38:23 GMT

Please paste the Version of the module as well. Please run the command show module sfr detail from the HA pair.

ASA5525X/pri/act# sh module

takroeker — Wed, 19 Apr 2017 15:51:10 GMT

ASA5525X/pri/act# sh module sfr det
Getting details from the Service Module, please wait...

Card Type: FirePOWER Services Software Module
Model: ASA5525
Hardware version: N/A
Serial Number: FCH1906K5CQ
Firmware version: N/A
Software version: 6.0.1-29
MAC Address Range: 84b8.02d2.bc58 to 84b8.02d2.bc58
App. name: ASA FirePOWER
App. Status: Up
App. Status Desc: Normal Operation
App. version: 6.0.1-29
Data Plane Status: Up
Console session: Ready
Status: Up
DC addr: x.x.x.x
Mgmt IP addr: x.x.x.x
Mgmt Network mask: x.x.x.x
Mgmt Gateway: x.x.x.x
Mgmt web ports: xxx
Mgmt TLS enabled: true
ASA5525X/pri/act#

2nd

takroeker — Wed, 19 Apr 2017 15:53:25 GMT

2nd

ASA5525X/sec/stby# sh module sfr det
Getting details from the Service Module, please wait...

Card Type: FirePOWER Services Software Module
Model: ASA5525
Hardware version: N/A
Serial Number: FCH19417N17
Firmware version: N/A
Software version: 6.0.1-29
MAC Address Range: 70e4.22e5.dc32 to 70e4.22e5.dc32
App. name: ASA FirePOWER
App. Status: Up
App. Status Desc: Normal Operation
App. version: 6.0.1-29
Data Plane Status: Up
Console session: Ready
Status: Up
DC addr: x.x.x.x
Mgmt IP addr: x.x.x.x
Mgmt Network mask: x.x.x.x
Mgmt Gateway: x.x.x.x
Mgmt web ports: xxx
Mgmt TLS enabled: true
ASA5525X/sec/stby#