topic Failover Not Sync in Active/Stanby Mode in Network Security

Failover Not Sync in Active/Stanby Mode

salman-ahmad — Tue, 12 Mar 2019 00:40:41 GMT

Hi,

I have found this error when i try to make Failover in Active/Standby position.

KHI-DR-ASA-BB-01# sh failover state

State Last Failure Reason Date/Time

This host - Primary

Active None

Other host - Secondary

Failed Ifc Failure 16:04:50 PK Oct 15 2012

inside: Failed

====Configuration State===

Sync Done

Sync Done - STANDBY

====Communication State===

Mac set

What is the cause of this error and what are the steps to troublshoot to resolve my problem.

Regards,

Salman Ahmed

Failover Not Sync in Active/Stanby Mode

Harish Balakrishnan — Mon, 24 Dec 2012 10:37:23 GMT

Hello Salman,

It looks like a communication issue between ASA's over failover link.. Are you able to ping

55.0.0.2 from ASA-1 ? and how is the failover link connected direct or via switch ?

regards

Harish

Failover Not Sync in Active/Stanby Mode

Karsten Iwen — Mon, 24 Dec 2012 11:08:40 GMT

You removed a relevant part of the config. Without knowing if you configured the interfaces right, it is hard to help you. Do you have standby-addresses on all data-interfaces?

One problem in your setup is that it is not recommended to use the management-ports as the Failover-link on the 5580. But that is probably not related to your actual problem.

--
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni