Restore Cisco ASA's in HA from Backup config

OnMENogin — Fri, 21 Feb 2020 16:47:57 GMT

Hi all,

I’m finding it hard to get information on the best way to do a restore of 2 ASA's in HA mode.

Imaging the config on both ASA's are bad and you don't have the time to unpick the config to remove all that you did over the last few days.

You have a backup of both primary and secondary from a few days ago that you would like to restore to.

I have found a post where someone explains the steps (below)

"The easiest way to do this would be to first apply the config on secondary and make the secondary unit active and then do a write on secondary once it’s active, then the secondary which is now active will push the config to former active restoring config there as well"

We have tried this method but once you apply the config to the secondary\standby, it immediately pulls the bad config from the primary\active.

How do you stop the standby pulling the active config ?

Thanks in advance.

Re: Restore Cisco ASA's in HA from Backup config

Mohammed al Baqari — Mon, 11 Feb 2019 18:16:18 GMT

If you know that your backup is healthy then restore directly on primary
and issue wr mem to replicate

Re: Restore Cisco ASA's in HA from Backup config

Richard Burts — Mon, 11 Feb 2019 22:32:03 GMT

Another approach could be to power down the secondary unit, restore the config to the primary unit, then power the secondary unit back up.

HTH

Rick

topic Re: Restore Cisco ASA's in HA from Backup config in Network Security

Restore Cisco ASA's in HA from Backup config

Re: Restore Cisco ASA's in HA from Backup config

Re: Restore Cisco ASA's in HA from Backup config