topic ASA-Failover in Network Security

ASA-Failover

chhayheng — Tue, 26 Mar 2019 00:57:00 GMT

Dear Expert,

I meet one issue regarding Failover Switch-Over.
When my ASA-Primary down, it will ASA-Secondary take over on ASA-Primary.Then when ASA-Primary up back, ASA-Secondary still as Active.
Do you have any idea to advice how to make Primary to be Active when its come up without set manually.

Best Regards,
Chhayheng

Hi, It can be done in

Traian Bratescu — Fri, 28 Aug 2015 12:02:31 GMT

Hi,

It can be done in failover group:

preempt

To cause the unit to become active on boot if it has the higher priority, use the preempt command in failover group configuration mode. To remove the preemption, use the no form of this command.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/I-R/cmdref2/p3.html#pgfId-2174046

Traian

Preemption is for Active

Karsten Iwen — Fri, 28 Aug 2015 12:59:49 GMT

Preemption is for Active/Active failover. For Active/Standby failover you have to change roles manually. As both units are the same model, there is no functional benefit from automatically changing the active role back to the primary unit.