topic Management interface for Failover in Network Security

Management interface for Failover

parvezahmad90 — Tue, 12 Mar 2019 01:58:38 GMT

Hello,

Please let me know Can we configured manangemet interface for lan based and statefull failover in ASA 5540 (Running 9.1 version).

Current Configuration for the interface is below.

interface Management0/0

management-only

nameif management

security-level 100

no ip address

I will create two subinterface of management for lan and statefull failover.

Will connect direct to another interface of secondary ASA.

Please let me know this solution will work.

Regards,

Management interface for Failover

Jouni Forss — Sun, 16 Jun 2013 16:26:03 GMT

Hi,

I dont think you need to configure any subinterfaces for this

You could remove the "management-only" and "nameif" and "security-level 100" configurations from the interface. Though I think the "failover" configurations might remove these on their own.

You could use

failover

failover lan unit primary

failover lan interface failover Management0/0

failover key

failover link failover Management0/0

failover interface ip failover x.x.x.x 255.255.255.252 standby y.y.y.y

failover

failover lan unit secondary

failover lan interface failover Management0/0

failover key

failover link failover Management0/0

failover interface ip failover x.x.x.x 255.255.255.252 standby y.y.y.y

- Jouni

Management interface for Failover

parvezahmad90 — Mon, 17 Jun 2013 16:22:41 GMT

Thanks a lot.