topic Re: Remotely access a failover pair? in Network Security

Remotely access a failover pair?

fsmontenegro — Mon, 11 Mar 2019 13:01:22 GMT

Hi!

Sorry for the simple question, but how can one remotely access the CLI for a failover unit in an ASA pair? If I SSH/Telnet into the address used, I get the primary unit...

Thanks!

Re: Remotely access a failover pair?

massimiliano.serafino — Thu, 19 Jun 2008 03:40:01 GMT

Hi,

You must use the IP address of the interface of the standby firewall.

I hope this helps.

Best regards.

Massimiliano

Re: Remotely access a failover pair?

uchideshi — Thu, 19 Jun 2008 14:43:28 GMT

You can't unless you have a terminal server that will allow you console access to the standby unit. Using the standby's IP without a TS logs you on the active unit.

Re: Remotely access a failover pair?

fsmontenegro — Fri, 20 Jun 2008 05:55:32 GMT

Hi,

What interface address? The failover or state interfaces are not valid options for allowing SSH/Telnet on, and the data interfaces (inside, outside, etc...) don't have an IP address, since the unit is the standby.

I can see how a terminal server can be used to access the console port, but are there any options that don't rely on additional hardware?

Thanks!

Re: Remotely access a failover pair?

Farrukh Haroon — Fri, 20 Jun 2008 10:33:13 GMT

No you can do this 'for sure'. You have to use the 'standby' IP address in order to achieve this.

interface gig 0/0

nameif inside

sec 100

ip address 192.168.1.200 255.255.255.0 standby 192.168.1.201

Host-PC> telnet 192.168.1.201

Regards

Farrukh