topic Need for use Standby IP in ASA in Network Security

Need for use Standby IP in ASA

mahesh18 — Tue, 12 Mar 2019 00:26:57 GMT

Hi all,

when we config DHCP pool in ASA and config the VLAN and assign it IP address.

Why we use Standby IP ?How can Primary address fail if they are on same interface

Thanks

Mahesh

Need for use Standby IP in ASA

Julio Carvajal — Fri, 23 Nov 2012 00:37:31 GMT

Hello Mahesh,

Not sure what you mean... Standby IP's on the ASA are used for the exchange of hello packets on the failover cluster.

Regards,

Need for use Standby IP in ASA

mahesh18 — Sat, 24 Nov 2012 17:14:02 GMT

Hi,

I have ASA with another ASA in failover cluster.

I have defined Vlan there and that vlan is doing DHCP.

So that vlan has IP address and also after ip address statement it has standby ip address.

Need to know why we have standby ip under that vlan?

thanks

mahesh

Need for use Standby IP in ASA

Julio Carvajal — Sat, 24 Nov 2012 17:33:15 GMT

Hello Mahesh,

You have it because you are running failover and in order to monitor an interface you will need to exchange hello packets between the primary ip and the standby ip. So you are basically telling the ASA send hello packets over this vlan to this secondary IP.

Regards,

Need for use Standby IP in ASA

mahesh18 — Sat, 24 Nov 2012 17:40:41 GMT

Hi,

So this secondary IP is on backup fw then?

Does it mean that if Main Fw says powered off then if i ssh to fw then still i will see the same fw hostname?

Also then which vlan IP it will show under vlan ?

if we have 2 fw in cluster and i log onto fw it shows info of only 1 fw is there a way i can get info of another fw in cluster

or i can login to backup fw?

Thanks

Mahesh

Need for use Standby IP in ASA

Julio Carvajal — Sat, 24 Nov 2012 18:34:39 GMT

So this secondary IP is on backup fw then?

Yes.

Does it mean that if Main Fw says powered off then if i ssh to fw then still i will see the same fw hostname?

Also then which vlan IP it will show under vlan ?

It will show same hostname and same vlan

if we have 2 fw in cluster and i log onto fw it shows info of only 1 fw is there a way i can get info of another fw in cluster

or i can login to backup fw?

You can log in to the backup or you can run commands from the primary unit but get the info from the secondary with the command:

failover exec standby show run

Remember to rate all of the helpful posts

Need for use Standby IP in ASA

mahesh18 — Sat, 24 Nov 2012 22:21:20 GMT

Hi,

So whats command to login to Secondary fw from primary

or can we straight login to secondary fw?

Thanks

Mahesh

Need for use Standby IP in ASA

Julio Carvajal — Sun, 25 Nov 2012 16:52:30 GMT

There is no such a command, you need to login into the secondary IP address. (straight login to secondary fw)

Regards,

Julio

Need for use Standby IP in ASA

mahesh18 — Sun, 25 Nov 2012 23:08:29 GMT

hi julio,

Thanks again for all the replies.

Everyday learning more about ASa from this forum

Regards

Mahesh

Need for use Standby IP in ASA

Julio Carvajal — Sun, 25 Nov 2012 23:10:04 GMT

Hi Mahesh,

Glad that I could help

Re: Need for use Standby IP in ASA

samaruth — Thu, 12 Jul 2018 15:19:16 GMT

Hi Julio,

Whats the use of standby ip in the management interface as below ? I know internal, external and HA interfaces have standby which is used to monitor the interfaces, receive hello packets and failover if such interfaces fail. But, when do we need standby ip for management interface ? any usecase can you tell me ?

interface Management0/0
nameif management
security-level 100
ip address 10.198.136.164 255.255.255.224 standby 10.198.136.165

Thanks.