topic ASA 5540 failover problem in Network Security https://community.cisco.com/t5/network-security/asa-5540-failover-problem/m-p/773636#M422090 <P>Hi,</P><P>I've got a headache with the failover of 2 asa 5540 in master/standby configuration. I've already 2x 5520 in master/stanby and they are working OK.</P><P>The command sh fail on the 5540s shows:</P><P></P><P>Failover On</P><P>Failover unit Primary</P><P>Failover LAN Interface: failover GigabitEthernet0/2 (up)</P><P>Unit Poll frequency 1 seconds, holdtime 15 seconds</P><P>Interface Poll frequency 5 seconds, holdtime 25 seconds</P><P>Interface Policy 1</P><P>Monitored Interfaces 3 of 250 maximum</P><P>Version: Ours 7.2(1), Mate 7.2(1)</P><P>Last Failover at: 15:51:36 CEDT May 24 2007</P><P> This host: Primary - Active</P><P> Active time: 3476085 (sec)</P><P> slot 0: ASA5540 hw/sw rev (1.1/7.2(1)) status (Up Sys)</P><P> Interface outside (x.x.x.x): Normal (Waiting)</P><P> Interface inside (y.y.y.y): Normal (Waiting)</P><P> Interface management (z.z.z.z): Normal (Not-Monitored)</P><P> Interface rtt (v.v.v.v): Normal (Waiting)</P><P> slot 1: empty</P><P> Other host: Secondary - Sync Config</P><P> Active time: 0 (sec)</P><P> slot 0: ASA5540 hw/sw rev (1.1/7.2(1)) status (Up Sys)</P><P> Interface outside (x.x.x.x): Unknown</P><P> Interface inside (y.y.y.y): Unknown</P><P> Interface management (z.z.z.z): Normal (Not-Monitored)</P><P> Interface rtt (v.v.v.v): Unknown (Waiting)</P><P> slot 1: empty</P><P></P><P>Stateful Failover Logical Update Statistics</P><P> Link : failover GigabitEthernet0/2 (up)</P><P> Stateful Obj xmit xerr rcv rerr</P><P> General 0 0 0 0</P><P> sys cmd 0 0 0 0</P><P> up time 0 0 0 0</P><P> RPC services 0 0 0 0</P><P> TCP conn 0 0 0 0</P><P> UDP conn 0 0 0 0</P><P> ARP tbl 0 0 0 0</P><P> Xlate_Timeout 0 0 0 0</P><P> VPN IKE upd 0 0 0 0</P><P> VPN IPSEC upd 0 0 0 0</P><P> VPN CTCP upd 0 0 0 0</P><P> VPN SDI upd 0 0 0 0</P><P> VPN DHCP upd 0 0 0 0</P><P></P><P> Logical Update Queue Information</P><P> Cur Max Total</P><P> Recv Q: 0 0 0</P><P> Xmit Q: 0 0 0</P><P></P><P>On the secondary's console there's always comming out this message:</P><P></P><P>Detected an Active mate</P><P></P><P> Unable to sync configuration from Active</P><P></P><P>Changed ports and cables on switches and no luck.</P><P>Any suggestion please?</P><P>Thanks</P> Fri, 21 Feb 2020 09:33:48 GMT oscarsoto1 2020-02-21T09:33:48Z ASA 5540 failover problem https://community.cisco.com/t5/network-security/asa-5540-failover-problem/m-p/773636#M422090 <P>Hi,</P><P>I've got a headache with the failover of 2 asa 5540 in master/standby configuration. I've already 2x 5520 in master/stanby and they are working OK.</P><P>The command sh fail on the 5540s shows:</P><P></P><P>Failover On</P><P>Failover unit Primary</P><P>Failover LAN Interface: failover GigabitEthernet0/2 (up)</P><P>Unit Poll frequency 1 seconds, holdtime 15 seconds</P><P>Interface Poll frequency 5 seconds, holdtime 25 seconds</P><P>Interface Policy 1</P><P>Monitored Interfaces 3 of 250 maximum</P><P>Version: Ours 7.2(1), Mate 7.2(1)</P><P>Last Failover at: 15:51:36 CEDT May 24 2007</P><P> This host: Primary - Active</P><P> Active time: 3476085 (sec)</P><P> slot 0: ASA5540 hw/sw rev (1.1/7.2(1)) status (Up Sys)</P><P> Interface outside (x.x.x.x): Normal (Waiting)</P><P> Interface inside (y.y.y.y): Normal (Waiting)</P><P> Interface management (z.z.z.z): Normal (Not-Monitored)</P><P> Interface rtt (v.v.v.v): Normal (Waiting)</P><P> slot 1: empty</P><P> Other host: Secondary - Sync Config</P><P> Active time: 0 (sec)</P><P> slot 0: ASA5540 hw/sw rev (1.1/7.2(1)) status (Up Sys)</P><P> Interface outside (x.x.x.x): Unknown</P><P> Interface inside (y.y.y.y): Unknown</P><P> Interface management (z.z.z.z): Normal (Not-Monitored)</P><P> Interface rtt (v.v.v.v): Unknown (Waiting)</P><P> slot 1: empty</P><P></P><P>Stateful Failover Logical Update Statistics</P><P> Link : failover GigabitEthernet0/2 (up)</P><P> Stateful Obj xmit xerr rcv rerr</P><P> General 0 0 0 0</P><P> sys cmd 0 0 0 0</P><P> up time 0 0 0 0</P><P> RPC services 0 0 0 0</P><P> TCP conn 0 0 0 0</P><P> UDP conn 0 0 0 0</P><P> ARP tbl 0 0 0 0</P><P> Xlate_Timeout 0 0 0 0</P><P> VPN IKE upd 0 0 0 0</P><P> VPN IPSEC upd 0 0 0 0</P><P> VPN CTCP upd 0 0 0 0</P><P> VPN SDI upd 0 0 0 0</P><P> VPN DHCP upd 0 0 0 0</P><P></P><P> Logical Update Queue Information</P><P> Cur Max Total</P><P> Recv Q: 0 0 0</P><P> Xmit Q: 0 0 0</P><P></P><P>On the secondary's console there's always comming out this message:</P><P></P><P>Detected an Active mate</P><P></P><P> Unable to sync configuration from Active</P><P></P><P>Changed ports and cables on switches and no luck.</P><P>Any suggestion please?</P><P>Thanks</P> Fri, 21 Feb 2020 09:33:48 GMT https://community.cisco.com/t5/network-security/asa-5540-failover-problem/m-p/773636#M422090 oscarsoto1 2020-02-21T09:33:48Z Re: ASA 5540 failover problem https://community.cisco.com/t5/network-security/asa-5540-failover-problem/m-p/773637#M422091 <HTML><HEAD></HEAD><BODY><P>It looks like bug to me, check this bug-id:CSCsd15475</P></BODY></HTML> Thu, 14 Jun 2007 12:31:15 GMT https://community.cisco.com/t5/network-security/asa-5540-failover-problem/m-p/773637#M422091 dsweeny 2007-06-14T12:31:15Z