topic Re: ASA 5520 Config Replication in Network Security

ASA 5520 Config Replication

asmith1972 — Mon, 11 Mar 2019 16:05:16 GMT

We have 2 Cisco ASA 5520 boxes setup - 1 is our live box and the otehr one is a failover.

These have been setup and running for a while and were working ok. But we have noticed that if we make a config change on one of the boxes the other box also got that change.

We backup the config on both of these boxes using KwiTools and have noticed that the config is now different on the backup back and it doesn't seam to be updated.

Anyone know what could be wrong?

Thanks

Re: ASA 5520 Config Replication

Collin Clark — Wed, 12 Aug 2009 12:25:09 GMT

Here's a link on verifying and troubleshooting the failover.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml#veri

Hope it helps.

Re: ASA 5520 Config Replication

asmith1972 — Wed, 12 Aug 2009 13:49:16 GMT

Many thanks

I have entered the show failover and on the primary unit it says:

Failover Off

Failover unit Secondary

Failover LAN Interface: Failover GigabitEthernet0/0 (up)

Unit Poll frequency 1 seconds, holdtime 15 seconds

Interface Poll frequency 5 seconds, holdtime 25 seconds

Interface Policy 1

Monitored Interfaces 5 of 250 maximum

and the secondary one is:

Failover Off (pseudo-Standby)

Failover unit Primary

Failover LAN Interface: Failover GigabitEthernet0/0 (up)

Unit Poll frequency 1 seconds, holdtime 15 seconds

Interface Poll frequency 5 seconds, holdtime 25 seconds

Interface Policy 1

Monitored Interfaces 5 of 250 maximum

---

Do you know what the command is to turn this back on?

Re: ASA 5520 Config Replication

kwillacey — Wed, 12 Aug 2009 14:10:30 GMT

'failover lan enable' that should do it

Re: ASA 5520 Config Replication

asmith1972 — Wed, 12 Aug 2009 14:12:15 GMT

thanks would I do this on box boxes or just the primary one.

If I do it on the primary will the config automatically copy over to the secondary

Re: ASA 5520 Config Replication

kwillacey — Wed, 12 Aug 2009 14:15:46 GMT

you should do it on both, im not 100% sure it would replicate the config automatically but you can do a write standby on the primary to get the config to replicate to the secondary.