Cisco ASA - Force Failover

cisco29111 — Tue, 12 Mar 2019 00:25:50 GMT

I have a Primary\Secondary LAN state firewall pair. The primary firewall is "Active", the secondary firewall is "Standby Ready". The running config has no "failover active" or "no failover active" directives in place. I want to manually fail over from the primary to the secondary. Do I

A) Log into the secondary and type "failover active" to fail over and "no failover active" to fail back (typed on the now active, original standby)
B) Log into the primary and type "no failover active" to fail over and "failover active" to fail back (typed on the now standby, original active).
C) Any combination of A and B

I am worried that any of these commands will put extra directives in my running-config that are not already present.

Cisco ASA - Force Failover

varrao — Wed, 21 Nov 2012 01:56:08 GMT

Hi Chris,

To test your failover you can put in any combination it does not put any load on your failover pair. It is a command to do a forcefu failover between firewalls and check the failover functionality.

Thanks,
Varun Rao
Security Team,
Cisco TAC

topic Cisco ASA - Force Failover in Network Security

Cisco ASA - Force Failover

Cisco ASA - Force Failover