topic Hi Daniel- in Network Security

ASA cluster IFC failure

rubberheart — Fri, 21 Feb 2020 13:43:31 GMT

Hi, Team

we had an issue with the ASA failover

the one should show standby , but it show failed

State Last Failure Reason Date/Time
This host - Secondary
Active None
Other host - Primary
Failed Ifc Failure
inside: Failed

could you help to undertand what is the IFC failure? I check the inside interface , all clear . also , I checked the switch side L2 status , all clear as well

thanks for your help!

regards

Daniel

Hi Daniel-

nspasov — Thu, 11 Feb 2016 14:46:08 GMT

Hi Daniel-

Can you please post the output from the following commands:

show failover

show failover history

show failover state

Also, can you check the inside interfaces on both units and make sure that they are in the same VLAN, same duplex, speed, etc.

Thank you for rating helpful posts!

Thanks , Neno.

rubberheart — Tue, 26 Apr 2016 19:31:39 GMT

Thanks , Neno.

there are some other L2 inline devices which cause this issue.

we will fix that , but still thanks for your kindly help !

Fantastic! Glad that you were

nspasov — Tue, 26 Apr 2016 20:51:47 GMT

Fantastic! Glad that you were able to resolve your own issue! 🙂

Now, since your issue is resolved, you should mark the thread as "answered" 🙂

ya , you got me :)

rubberheart — Wed, 27 Apr 2016 01:19:26 GMT

ya , you got me 🙂

Re: Hi Daniel-

shehreyar — Mon, 11 May 2020 09:46:09 GMT

Hi,
Is it possible that interface input errors can cause the "Standby Ready Ifc Failure" for certain interfaces?
I am facing the same issue, during the peak hours 3 interface monitoring fail and then I have to remove them manually from the active FW with the command "no monitor-interface XXXXX". I have doubt that input errors on the Active firewall are causing this problem.
Please advise.

Regards.

Re: ASA cluster IFC failure

AlanPerry7196 — Fri, 30 Apr 2021 19:01:56 GMT

What did you do to resolve the issue?

Re: Fantastic! Glad that you were

AlanPerry7196 — Fri, 30 Apr 2021 19:03:06 GMT

What resolved the issue? I have the same issue and the commands given just verify the secondary is failed

Re: ASA cluster IFC failure

leonardo.soireff@codere.com — Thu, 26 May 2022 16:02:52 GMT

¿Cual fue la solucion del incidente? Tengo el mismo problema

Result of the command: "show failover state"

State Last Failure Reason Date/Time
This host - Secondary
Active None
Other host - Primary
Standby Ready Ifc Failure 09:51:25 ART May 26 2022
telefonica: Failed

====Configuration State===
Sync Done - STANDBY
====Communication State===
Mac set

------------------------------------------------------

Result of the command: "sh int e1/8"

Interface Ethernet1/8 "telefonica", is up, line protocol is up
Hardware is EtherSVI, BW 1000 Mbps, DLY 10 usec
Description: To Telefonica MPLS
MAC address 4c71.0dcc.d4ee, MTU 1500
IP address 172.30.0.1, subnet mask 255.255.255.248
Traffic Statistics for "telefonica":
32572537950 packets input, 23534103187580 bytes
28369000300 packets output, 7727151657667 bytes
175263387 packets dropped
1 minute input rate 8944 pkts/sec, 5671797 bytes/sec
1 minute output rate 8158 pkts/sec, 2903794 bytes/sec
1 minute drop rate, 55 pkts/sec
5 minute input rate 9395 pkts/sec, 6102341 bytes/sec
5 minute output rate 8899 pkts/sec, 3309832 bytes/sec
5 minute drop rate, 66 pkts/sec

---------------------------------------------------------------

Result of the command: "sh run int e1/8"

!
interface Ethernet1/8
description To Telefonica MPLS
nameif telefonica
security-level 60
ip address 172.30.0.1 255.255.255.248 standby 172.30.0.3

Re: Hi Daniel-

kjhsof — Tue, 24 Sep 2024 00:49:52 GMT

Just checking to see if there was an answer as we are seeing this IFC error for circuit connections pop up on several devices.