topic Re: Correct procedure to replace failed secondary ASA unit in Network Security

Correct procedure to replace failed secondary ASA unit

endpoint — Mon, 11 Mar 2019 22:52:50 GMT

Hello

i just received a RMA for failed ASA 5520 that was acting as secondary unit in multicontext configuration. What would be correct procedure to install it back in production? Do i need to restore backed up config of the fallen unit or is it just enough to enable multimode and connect to existing (primary) unit? Any good link for documentation that deal with this issues would be also appreciated.

Thanks in advance

Correct procedure to replace failed secondary ASA unit

sean_evershed — Thu, 12 Apr 2012 04:03:49 GMT

Hi,

See below this section from the ASA configuration guide

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/ha_active_active.html#wp1095324

Correct procedure to replace failed secondary ASA unit

varrao — Thu, 12 Apr 2012 09:49:00 GMT

Here you go:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml

Varun Rao

Re: Correct procedure to replace failed secondary ASA unit

MarkoTanaskovic — Thu, 12 Apr 2012 15:19:42 GMT

Configure the ASA for failover communication and as a secondary unit. This is done from the system context so yes you need to switch it into the multiple context routed mode. Power the asa on and connect only the failover communication interface. This will make sure that it is seen by the primary as failed. Once the failover communication is up, and the configutation synchronisation and connection replicatiin are over, connect the traffic interfaces.

This is pretty much it. Hope it helps.

Sent from Cisco Technical Support iPad App

Re: Correct procedure to replace failed secondary ASA unit

endpoint — Thu, 12 Apr 2012 16:00:54 GMT

Thanks Marko,

that did the trick.

Regards,

Re: Correct procedure to replace failed secondary ASA unit

MarkoTanaskovic — Sat, 14 Apr 2012 14:23:37 GMT

You are welcome.

Regards,

Marko