topic Cisco ASA unit failed. in Network Security

Cisco ASA unit failed.

samarjit.das — Mon, 11 Mar 2019 23:51:20 GMT

Which trigger a cisco ASA unit to be failed. The primary firewall was acting the active role and secondary was acting the standby role. On failure of one interface in the primary firewall, the unit was declared as failed and secondary firewall automatically switchover to the active role. In this scenario failover worked as expected but don't know why the primary unit was declared as failed in one interface failure.

I would like to know whether failure of single link connected to a interface makes the unit fail.If not what is the number of interface should be down to be a unit failed.

Cisco ASA unit failed.

Karsten Iwen — Fri, 07 Sep 2012 11:34:31 GMT

That is all controlled with the failover-commands. With "show failover" you can see the actual settings of your ASA.

The options are described in the config-guide:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/ha_active_standby.html#wp1074591

--
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Cisco ASA unit failed.

samarjit.das — Sat, 08 Sep 2012 14:30:48 GMT

The unit can fail in condition of too many monitored interfaces fail but in my case only one monitored interface is fail.But don't know why unit is showing failed.

Cisco ASA unit failed.

Mohammad Alhyari — Sat, 08 Sep 2012 17:44:40 GMT

HI ,

what happened here is that we :

stopped receiving HA helloes on that interface

started interface testing as mentioned below :

https://supportforums.cisco.com/docs/DOC-2469

then the interface marked as failed and failover happened . and notice that the default is to failover if we have one failed interface.

Mohammad.

Re: Cisco ASA unit failed.

gurpsin2 — Sat, 08 Sep 2012 17:54:01 GMT

Hi samarjit,

An interface check is always done by both the units in failover through hello packets exchange, failover would occur if

1) a monitored interface fails

2) the standby unit gets to know that it's peer has less active interfaces than it currently has n since it has more active interfaces, it becomes active.

I think 2nd option applies to ur case

Thnks

Sent from Cisco Technical Support iPhone App