topic Re: Replacing standby failover ASA in Network Security

Replacing standby failover ASA

Colin Higgins — Fri, 21 Feb 2020 15:56:21 GMT

I have two ASA firewalls in an active-passive standby arrangement. The secondary unit had a hardware failure and needs to be replaced.

When I configure the replacement, do I need to put the ENTIRE running configuration on it and set it to "failover lan unit secondary"?

Or do I simply need to configure the failover ink, set the system to "failover lan unit secondary" and cable it up? (with the idea that the primary then syncs the config to the standby)

Re: Replacing standby failover ASA

Rahul Govindan — Mon, 02 Jul 2018 15:11:45 GMT

Since it is the secondary unit, it should pick up all the configuration from the primary (currently active) unit. So just the failover configuration and any files that need to be uploaded on to the flash (anyconnect, hostscan images etc.)

Re: Replacing standby failover ASA

Rob Ingram — Mon, 02 Jul 2018 15:18:11 GMT

Hi,
You at least need to configure the interfaces, enable failover and define "failover lan unit secondary". The configuration will then sync from the Active ASA.

HTH