topic doubt with HA failover config in Network Security

doubt with HA failover config

Diego Maciel Gomes — Tue, 12 Mar 2019 00:16:37 GMT

Hello,

A fast doubt.

Topology

ASA 1:

inside = 10.0.0.10/24

outside = 192.168.0.10/24

ASA 2:

inside = 10.0.0.20/24

outside = 192.168.0.20/24

Im using the Management0/0 to configure the Failover, OK.

So, I have:

ASA1

Management = 1.1.1.1

ASA2

Management = 1.1.1.2

When Im finishing the configuration, ASDM asks to me to put the peer.

So, what IP should I set? Management interface IP? or inside or outside IP? Or it doesnt matter???

Thanks!

Diego

doubt with HA failover config

Julio Carvajal — Tue, 30 Oct 2012 21:38:14 GMT

Hello Diego,

First of all I would not recommend you to use the managment interface as the failover link or failover interface.

Regarding your questions is the managment what you are looking for.

Regards,

Julio

Re: doubt with HA failover config

Diego Maciel Gomes — Tue, 30 Oct 2012 22:49:18 GMT

Hi Julio,

Ok, I'll do by cli. The config is really very simple.

Thanks.

Diego

Julio, one more question.

How can I check my boot file config??? When I look for it by ASDM, the line is empty.

What I need to do? Any idea?

Re: doubt with HA failover config

Julio Carvajal — Tue, 30 Oct 2012 22:54:02 GMT

Hello Diego,

How can I check my boot file config??? When I look for it by ASDM, the line is empty.

What I need to do? Any idea?

Show run boot system

That's it!

Regards,

Remember to rate all of the helpful posts, If you do not know how to rate a post, just let me know

Julio

Re: doubt with HA failover config

Diego Maciel Gomes — Tue, 30 Oct 2012 22:57:05 GMT

I found it:

# sh bootvar

BOOT variable = disk0:/asa822-12-k8.bin
Current BOOT variable = disk0:/asa822-12-k8.bin
CONFIG_FILE variable =
Current CONFIG_FILE variable =

I guess I have something wrong, right?

Re: doubt with HA failover config

Julio Carvajal — Tue, 30 Oct 2012 22:58:37 GMT

Hello

Show run boot system will show you the first available image on flash the ASA will use next time it boots

show bootvar will show you the currently being used and the next available,

Regards,

Remember to rate all of the helpful posts, If you do not know how to rate a post, just let me know

Julio

Re: doubt with HA failover config

Diego Maciel Gomes — Tue, 30 Oct 2012 23:07:16 GMT

Im thinking to do it...

copy startup-config disk0:/startup.cfg (startup-config is equal to CONFIG_FILE variable, right?)

After I set the

CONFIG_FILE variable =

to:

disk0:/startup.cfg

What do you think: Is it appear ok?

Re: doubt with HA failover config

Julio Carvajal — Tue, 30 Oct 2012 23:11:17 GMT

Hello Diego,

It does appear okay!

Do you want to boot with a particular configuration file??

Because if you want to do it with the one you are currently running just save the configuration!

Regards,