https://community.cisco.com/t5/network-security/asa-ha-standby-ip/m-p/3902268#M5759 Should add, for management - if you are not using OOB or dedicated management port Fri, 02 Aug 2019 18:52:29 GMT GRANT3779 2019-08-02T18:52:29Z https://community.cisco.com/t5/network-security/asa-ha-standby-ip/m-p/3902156#M5757 <P>Hi All,</P><P>Can someone explain how the ASA uses the standby IP in a Active/Standby config. I have always configured the devices like this as per cisco design. Tried to look into this further but unable to find a definitive answer. When the PRIMARY fw fails, the Secondary uses the IP &amp; MAC of the of the PRI - so how does it use the standby IP configured on the interface?</P><P>Regards, mk</P> Fri, 21 Feb 2020 17:21:58 GMT https://community.cisco.com/t5/network-security/asa-ha-standby-ip/m-p/3902156#M5757 mkazam001 2020-02-21T17:21:58Z https://community.cisco.com/t5/network-security/asa-ha-standby-ip/m-p/3902266#M5758 Two things come to mind.<BR />You would use a standby address on a management related port so you can actually manage the secondary firewall. How else would you be able to SSH to it for example?<BR />Also, for the purposes of monitoring as part of your HA setup. The standby ip is used by the active ASA to monitor the secondary firewalls interface if that interface is part of your failover monitoring config. Fri, 02 Aug 2019 18:49:26 GMT https://community.cisco.com/t5/network-security/asa-ha-standby-ip/m-p/3902266#M5758 GRANT3779 2019-08-02T18:49:26Z https://community.cisco.com/t5/network-security/asa-ha-standby-ip/m-p/3902268#M5759 Should add, for management - if you are not using OOB or dedicated management port Fri, 02 Aug 2019 18:52:29 GMT https://community.cisco.com/t5/network-security/asa-ha-standby-ip/m-p/3902268#M5759 GRANT3779 2019-08-02T18:52:29Z