topic Re: ASA 5580 Failover in Network Security

ASA 5580 Failover

Bruce Summers — Mon, 11 Mar 2019 19:28:28 GMT

I just stood up 2 ASA 5580-40 runnng 8.3(2) code.

I configured an active / passive failover configuration with a primary and secondary lan unit.

they are directly connected with 10g fiber connections.

i downed the primary and the secondary picked up. However, once i brought the primary back online, they continually failover from active to standby and back, over and over...

I removed the failover configuration on both units and reapplied the configuration following the instructions (again) from the configuration guide.

same issue.

Any thoughts on why these 2 appliances will fail back and forth like this?

thanks.

Bruce

Re: ASA 5580 Failover

Jennifer Halim — Wed, 29 Dec 2010 12:37:06 GMT

Can you please share the output of the following from both primary and secondary FW:

sh run failover

sh failover

sh failover state

sh failover history

Re: ASA 5580 Failover

Bruce Summers — Wed, 29 Dec 2010 12:43:08 GMT

I can, but it will be a couple hours before I can get to the datacenter.

Other than those outputs, is there any thoughts on what could cause this? Polling maybe ? thats been one thought.

thanks.

Bruce

Re: ASA 5580 Failover

Jennifer Halim — Wed, 29 Dec 2010 12:44:55 GMT

Not really, unless there are any cable or interfaces issue between the 2 ASAs, that's why it keeps failing over between the 2 firewalls.

Re: ASA 5580 Failover

Bruce Summers — Wed, 29 Dec 2010 12:50:22 GMT

if we down one of the peers, when we bring it back up, we actually see that the 2 appliances can "see" each other...it goes through the entire "peer detected, synchronizing configuration, config sync complete" process and then they start the entering standby state, active state, standby and so on, continuously...

we've changed out interfaces and fiber...

Re: ASA 5580 Failover

Jennifer Halim — Wed, 29 Dec 2010 12:56:54 GMT

The output of the requested commands should tell us more information.

Re: ASA 5580 Failover

Bruce Summers — Wed, 29 Dec 2010 13:01:21 GMT

understood...I'll get those posted soon...

thanks for your thoughts and help.

Bruce