Not consistent - ASA licensing

Naveen Gupta — Tue, 12 Mar 2019 00:11:57 GMT

What I am confused is that when I do 'show activation' it shows Active/Active does not matches with 'show failover' it shows Active/Passive.

Attached is the file for reference. Any help on this?

Not consistent - ASA licensing

Jennifer Halim — Fri, 19 Oct 2012 19:27:51 GMT

Within the "show activation-key", the Active/Active means that it is capable of running the Active/Active failover (or licensed to perform Active/Active failover if configured to do so).

Active/Active failover needs the ASA to be in multiple context mode, and your ASA is configured in single mode, so it is Active/Passive failover that has been configured on it.

Hope that answers your question.

Not consistent - ASA licensing

Naveen Gupta — Fri, 19 Oct 2012 19:40:51 GMT

How did you infer that the ASA is configured in single mode?

Re: Not consistent - ASA licensing

Jennifer Halim — Fri, 19 Oct 2012 19:48:59 GMT

The "show failover" output doesn't show the context information (it will show the 2 failover groups if it's in multiple context mode).

Here is an example when it's in Active/Active mode:

hostname# show failover

Failover On

Failover unit Primary

Failover LAN Interface: folink GigabitEthernet0/2 (up)

Unit Poll frequency 1 seconds, holdtime 15 seconds

Interface Poll frequency 4 seconds

Interface Policy 1

Monitored Interfaces 8 of 250 maximum failover replication http

Group 1 last failover at: 13:40:18 UTC Dec 9 2004

Group 2 last failover at: 13:40:06 UTC Dec 9 2004

This host: Primary

Group 1 State: Active

Active time: 2896 (sec)

Group 2 State: Standby Ready

Active time: 0 (sec)

slot 0: ASA-5530 hw/sw rev (1.0/7.0(0)79) status (Up Sys)

slot 1: SSM-IDS-20 hw/sw rev (1.0/5.0(0.11)S91(0.11)) status (Up)

admin Interface outside (10.132.8.5): Normal

admin Interface folink (10.132.9.5/fe80::2a0:c9ff:fe03:101): Normal

admin Interface inside (10.130.8.5/fe80::2a0:c9ff:fe01:101): Normal

admin Interface fourth (10.130.9.5/fe80::3eff:fe11:6670): Normal

ctx1 Interface outside (10.1.1.1): Normal

ctx1 Interface inside (10.2.2.1): Normal

ctx2 Interface outside (10.3.3.2): Normal

ctx2 Interface inside (10.4.4.2): Normal

Other host: Secondary

Group 1 State: Standby Ready

Active time: 190 (sec)

Group 2 State: Active

Active time: 3322 (sec)

slot 0: ASA-5530 hw/sw rev (1.0/7.0(0)79) status (Up Sys)

slot 1: SSM-IDS-20 hw/sw rev (1.0/5.0(0.1)S91(0.1)) status (Up)

admin Interface outside (10.132.8.6): Normal

admin Interface folink (10.132.9.6/fe80::2a0:c9ff:fe03:102): Normal

admin Interface inside (10.130.8.6/fe80::2a0:c9ff:fe01:102): Normal

admin Interface fourth (10.130.9.6/fe80::3eff:fe11:6671): Normal

ctx1 Interface outside (10.1.1.2): Normal

ctx1 Interface inside (10.2.2.2): Normal

ctx2 Interface outside (10.3.3.1): Normal

ctx2 Interface inside (10.4.4.1): Normal

topic Re: Not consistent - ASA licensing in Network Security

Not consistent - ASA licensing

Not consistent - ASA licensing

Not consistent - ASA licensing

Re: Not consistent - ASA licensing