topic Re: ASA Failover in Network Security https://community.cisco.com/t5/network-security/asa-failover/m-p/1277374#M838430 <HTML><HEAD></HEAD><BODY><P>what do you mean you only have 1 IP? did you not configure the standby addresses?</P></BODY></HTML> Fri, 28 Aug 2009 12:35:21 GMT srue 2009-08-28T12:35:21Z ASA Failover https://community.cisco.com/t5/network-security/asa-failover/m-p/1277371#M838426 <P>When configuring ASA's in A/S should you be able to connect to the ASA in standby mode?</P> Mon, 11 Mar 2019 16:10:16 GMT https://community.cisco.com/t5/network-security/asa-failover/m-p/1277371#M838426 networker99 2019-03-11T16:10:16Z Re: ASA Failover https://community.cisco.com/t5/network-security/asa-failover/m-p/1277372#M838428 <HTML><HEAD></HEAD><BODY><P>my experience, it depends...it depends on how you have authentication and routing configured on the primary. if dynamic routing is enabled and you're relying on an authentication server, it's possible the standby unit doesn't have a route to the auth server. to accomodate this, put a static route in the primary just for the auth server...or have a LOCAL auth group as a fallback auth method when the auth server times out.</P><P>also, if yo'ure using an auth server (eg radius/tacacs), make sure you have the standby IP in there as well as the primary.</P></BODY></HTML> Thu, 27 Aug 2009 16:10:25 GMT https://community.cisco.com/t5/network-security/asa-failover/m-p/1277372#M838428 srue 2009-08-27T16:10:25Z Re: ASA Failover https://community.cisco.com/t5/network-security/asa-failover/m-p/1277373#M838429 <HTML><HEAD></HEAD><BODY><P>Only through console. I have this setup and I cannot access the standby box unless I use console. </P><P>Box boxes are configured exactly the same, so you only have 1 IP address. </P><P>On the old PIXes you were able to connect to both the standby and active boxes because each one had a different IP.</P><P></P><P>You can however issue failover commands to the standby box. So you can restart the standby box or make it active, but as far as I know that is all you can do.</P></BODY></HTML> Thu, 27 Aug 2009 22:32:32 GMT https://community.cisco.com/t5/network-security/asa-failover/m-p/1277373#M838429 daniel.diaz 2009-08-27T22:32:32Z Re: ASA Failover https://community.cisco.com/t5/network-security/asa-failover/m-p/1277374#M838430 <HTML><HEAD></HEAD><BODY><P>what do you mean you only have 1 IP? did you not configure the standby addresses?</P></BODY></HTML> Fri, 28 Aug 2009 12:35:21 GMT https://community.cisco.com/t5/network-security/asa-failover/m-p/1277374#M838430 srue 2009-08-28T12:35:21Z Re: ASA Failover https://community.cisco.com/t5/network-security/asa-failover/m-p/1277375#M838431 <HTML><HEAD></HEAD><BODY><P>Yes, just make sure the standby addresses are setup. I connect to our standby and perform upgrades all the time without any issues.</P></BODY></HTML> Mon, 31 Aug 2009 16:18:52 GMT https://community.cisco.com/t5/network-security/asa-failover/m-p/1277375#M838431 campbech1 2009-08-31T16:18:52Z Re: ASA Failover https://community.cisco.com/t5/network-security/asa-failover/m-p/1277376#M838432 <HTML><HEAD></HEAD><BODY><P>This is how my failover is configured: failover</P><P>failover lan unit primary</P><P>failover lan interface LANFAIL GigabitEthernet0/3</P><P>failover polltime unit 1 holdtime 3</P><P>failover key *****</P><P>failover link LANFAIL GigabitEthernet0/3</P><P>failover interface ip LANFAIL 192.168.101.1 255.255.255.0 standby 192.168.101.2</P><P></P><P>I do have the standby address configured for the failover link but I do not have a standby address on any other interface. I never really tried connecting to the failover IP address, I dont have that routed through my regular network.</P><P></P><P>Are you saying I should have a stanby IP address on my other interfaces aswell? I know the PIXs are setup that way.</P><P>Thanks</P></BODY></HTML> Mon, 31 Aug 2009 16:37:37 GMT https://community.cisco.com/t5/network-security/asa-failover/m-p/1277376#M838432 daniel.diaz 2009-08-31T16:37:37Z