topic Re: ASA Failover in Network Security

ASA Failover

sameermunj — Mon, 11 Mar 2019 18:53:12 GMT

Hi experts

My network setup has 2 number for ASA 5520 firewall configured in as Active-Standby setup.(ASA Version 8.2(1) )..One of the firewall is configured as Active and other is Standby..Recently we experienced automatic failover without any boot/failure of primary firewall or without any physical communication issue.The primary firewall was working fine still the failover has happened and standby firewall has become active..

From the documentation i could found following reasons for the failover...

The unit has a hardware failure or a power failure.

The unit has a software failure.
Too many monitored interfaces fail.
The no failover active command is entered on the active unit, or the failover active command is entered on standby unit.

Is there any other reason for the failover apart from 4 mentioned above....Setup is working fine and jsut want to understand the cause for the failover..

Re: ASA Failover

Jennifer Halim — Tue, 12 Oct 2010 10:06:23 GMT

You can check the reason why the failover occured by issueing the command: show failover history

Here is the command reference for more information:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/s3.html#wp1474400

Hope that helps to determine the possible issue.

Re: ASA Failover

sameermunj — Tue, 12 Oct 2010 10:23:22 GMT

Hello

Thanks for the quick reply..

Please find below the output of show history

------------------ show failover history ------------------

==========================================================================

From State To State Reason

==========================================================================

09:49:40 IST Oct 8 2010

Standby Ready Just Active Other unit wants me Active

09:49:40 IST Oct 8 2010

Just Active Active Drain Other unit wants me Active

09:49:40 IST Oct 8 2010

Active Drain Active Applying Config Other unit wants me Active

09:49:40 IST Oct 8 2010

Active Applying Config Active Config Applied Other unit wants me Active

09:49:40 IST Oct 8 2010

Active Config Applied Active Other unit wants me Active

04:06:18 IST Oct 9 2010

Active Failed Interface check

04:06:35 IST Oct 9 2010