topic Re: ASA failover issue in Network Security https://community.cisco.com/t5/network-security/asa-failover-issue/m-p/1278288#M809579 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P>u need to sub-interface the failover interface and connect with a cross cable, and finish of the configuration as per the attachment</P><P></P><P>Thanks</P><P>AP</P><P></P><P> </P><P></P></BODY></HTML> Wed, 16 Sep 2009 08:41:13 GMT apdatasoft 2009-09-16T08:41:13Z ASA failover issue https://community.cisco.com/t5/network-security/asa-failover-issue/m-p/1278287#M809575 <P>Dear concern,</P><P>We have two ASA 5520 and configured lan base fail over.</P><P>But failover not working as per expectation.</P><P></P><P>Please find attachment of show tech of both ASA.</P><P></P><P>Regards</P><P>Imran</P><P></P><P> </P><P></P> Mon, 11 Mar 2019 16:16:01 GMT https://community.cisco.com/t5/network-security/asa-failover-issue/m-p/1278287#M809575 skmdimran 2019-03-11T16:16:01Z Re: ASA failover issue https://community.cisco.com/t5/network-security/asa-failover-issue/m-p/1278288#M809579 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P>u need to sub-interface the failover interface and connect with a cross cable, and finish of the configuration as per the attachment</P><P></P><P>Thanks</P><P>AP</P><P></P><P> </P><P></P></BODY></HTML> Wed, 16 Sep 2009 08:41:13 GMT https://community.cisco.com/t5/network-security/asa-failover-issue/m-p/1278288#M809579 apdatasoft 2009-09-16T08:41:13Z Re: ASA failover issue https://community.cisco.com/t5/network-security/asa-failover-issue/m-p/1278289#M809596 <HTML><HEAD></HEAD><BODY><P>Hi, from what I see the firewall failover is well configured, you have not configured the stateful failover feature, which allows for all connections, IPsec sessions, etc to be synced with he secondary unit. The command should do the job for you:</P><P>failover link sync GigabitEthernet0/1</P><P></P></BODY></HTML> Wed, 16 Sep 2009 17:34:02 GMT https://community.cisco.com/t5/network-security/asa-failover-issue/m-p/1278289#M809596 marc-andre.desy 2009-09-16T17:34:02Z Re: ASA failover issue https://community.cisco.com/t5/network-security/asa-failover-issue/m-p/1278290#M809605 <HTML><HEAD></HEAD><BODY><P>Hi marc-andre,</P><P></P><P>Can I have two ASA's connected via a single ethernet cable (ASA-1 G0/3 and ASA-2 G0/3)?</P><P></P><P>Can I use IP address for those interface that are not in my routing table (1.1.1.1 &amp; 1.1.1.2)?</P><P></P><P>What are the most basic commands needed?</P><P></P><P></P><P></P><P>thanks</P></BODY></HTML> Thu, 17 Sep 2009 18:51:41 GMT https://community.cisco.com/t5/network-security/asa-failover-issue/m-p/1278290#M809605 jimmyc_2 2009-09-17T18:51:41Z Re: ASA failover issue https://community.cisco.com/t5/network-security/asa-failover-issue/m-p/1278291#M809615 <HTML><HEAD></HEAD><BODY><P>Yes you can. </P><P>I have connected them directly with a straight cable and the configuration is as follows:</P><P>Firewall1# sh runn failover</P><P>failover</P><P>failover lan unit primary</P><P>failover lan interface stateful Management0/0</P><P>failover polltime unit msec 200 holdtime msec 800</P><P>failover polltime interface msec 500 holdtime 5</P><P>failover link stateful Management0/0</P><P>failover interface ip stateful 192.168.254.1 255.255.255.252 standby 192.168.254.2</P><P>-----------------------------------------------------------------------------------</P><P>Firewall2# sh runn failover</P><P>failover</P><P>failover lan unit secondary</P><P>failover lan interface stateful Management0/0</P><P>failover polltime unit msec 200 holdtime msec 800</P><P>failover polltime interface msec 500 holdtime 5</P><P>failover link stateful Management0/0</P><P>failover interface ip stateful 192.168.254.1 255.255.255.252 standby 192.168.254.2</P><P></P><P>This configuration is working for me. </P></BODY></HTML> Fri, 18 Sep 2009 00:57:08 GMT https://community.cisco.com/t5/network-security/asa-failover-issue/m-p/1278291#M809615 Shyama Prasad Chakraborty 2009-09-18T00:57:08Z