topic Authentication fails on Standby ASA in Network Security

Authentication fails on Standby ASA

ajay chauhan — Mon, 11 Mar 2019 20:06:26 GMT

Hi All,

I have 2 ASA box in failover mode auth on active work fine ..i do get ssh or telnet access for standby but that fails.

The floting IP is mentioned in ACS.

Any suggestions.

Thanks

Ajay

Re: Authentication fails on Standby ASA

mirober2 — Mon, 14 Mar 2011 14:53:05 GMT

Hi Ajay,

A couple of things you can try:

1. First make sure the AAA configuration was correctly replicated to the standby unit (check 'show run aaa' and 'show run aaa-server' to make sure the output matches on both units).
2. Try to ping the ACS server from the Standby unit. If this fails and ACS should reply to pings, troubleshoot the network to find out why communication is failing.
3. Run 'test aaa-server authentication ' on the Standby unit and check what the reason for the failure is.
4. Enable 'debug aaa authentication' on the Standby unit and watch the output when you try to authenticate.

Hope that helps.

-Mike

Re: Authentication fails on Standby ASA

tj.mitchell — Mon, 14 Mar 2011 16:24:24 GMT

If the secondary IP Address isn't in ACS then ACS will not authentication the standby unit.

Treat the standby ASA as a regular device when it comes to this since the source address will be the standby IP not the Floating IP.

Authentication fails on Standby ASA

hala samy — Sun, 23 Feb 2014 08:42:30 GMT

thanks TJ IT Worked for me......