topic OSPF on standby ASA in Network Security

OSPF on standby ASA

rakesh.thale — Mon, 11 Mar 2019 14:09:59 GMT

Hi, I have ASA 5520 configured in Active/standby mode. These boxes are connected to two Cisco 3800 series routers. The OSPF is configured here to auto divert the traffic on these routers.

On my Active box the ospf is working fine. But at the same time my standby box is unable to establish ospf neighbourship.

Does it possible to have same ospf on both standby and Active boxes?

Kindly suggest.

ThankX in advance.

Re: OSPF on standby ASA

Jon Marshall — Fri, 07 Nov 2008 15:48:08 GMT

You will not see OSPF information on the standby unit until there is a failover to the standby unit and then OSPF will reconverge.

There will obviously be a delay when failing over so you may want to change the OSPF timers to reduce the amount of failover time.

Jon

Re: OSPF on standby ASA

rakesh.thale — Mon, 10 Nov 2008 04:01:16 GMT

Jon, Thankx for the valuable reply.

Can I have a reference document for the same.

Thanks again in advance.

Re: OSPF on standby ASA

Jon Marshall — Mon, 10 Nov 2008 08:13:32 GMT

From the 7.2 confiiguration guide

Dynamic Routing and Failover

Dynamic routes are not replicated to the standby unit or failover group in a failover configuration. Therefore, immediately after a failover occurs, some packets received by the security appliance may be dropped because of a lack of routing information or routed to a default static route while the routing table is repopulated by the configured dynamic routing protocols.

Full link -

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/ip.html

Jon