topic Re: 5510 Active\Standy Config in Network Security

5510 Active\Standy Config

David Shearing — Mon, 11 Mar 2019 16:05:53 GMT

Hi,

When you configure the second ASA should it have a different hostname, or just different IP addresses. I currently have the failover working but if it does failover the secondary will keep the primary hostname when reverting back.

Also if i set an interface to not be monitored for failover do i need to set a secondary IP address for the failover device?

Thanks for the help.

Re: 5510 Active\Standy Config

Jon Marshall — Thu, 13 Aug 2009 18:51:28 GMT

"When you configure the second ASA should it have a different hostname, or just different IP addresses. I currently have the failover working but if it does failover the secondary will keep the primary hostname when reverting back."

You don't have to but it can get very confusing if you want to connect to the standby firewall for any reason. Personally i always use a different hostname.

"Also if i set an interface to not be monitored for failover do i need to set a secondary IP address for the failover device?"

Not to my knowledge no although again i tend to assign IP's to all interfaces for both the active and failover firewalls.

Jon

Re: 5510 Active\Standy Config

ttran — Thu, 13 Aug 2009 19:34:33 GMT

Depending what you need like Jon described. As for me my active/standby config is identical between the primary and secondary. Check out this link and hope clear your questions:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/failover.html