topic Hi Mohd, in Network Security

Firewall failover configuration

Mohd Imtiaz Hussain — Tue, 12 Mar 2019 07:19:59 GMT

Hi,

Can you share the failover configuration for ASA firewall. Incase if any of the interface on primary(active) firewall fails it should switch over to secondary(standby) host.

Full configuration with

Joel — Thu, 18 Feb 2016 12:45:24 GMT

Full configuration with stateful failover.

PRIMARY

failover
failover lan unit primary
failover lan interface folink GigabitEthernet0/6
failover key *********
failover link stateful GigabitEthernet0/7
failover interface ip folink 192.168.254.25 255.255.255.252 standby 192.168.254.26
failover interface ip stateful 192.168.254.17 255.255.255.252 standby 192.168.254.18
monitor-interface outside
monitor-interface inside

SECONDARY

failover
failover lan unit secondary
failover lan interface folink GigabitEthernet0/6
failover key ******
failover interface ip folink 192.168.254.25 255.255.255.252 standby 192.168.254.26

Joel

Hi Mohd,

Rishabh Seth — Thu, 18 Feb 2016 12:46:59 GMT

Hi Mohd,

By default asa monitors its physical interfaces and monitoring for sub-interfaces is disabled in failover setup.

Refer following link:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/failover.html#wp1073911

-RS.

Rate if it helps