ASA 5520 Config Replication

[asmith1972]

We have 2 Cisco ASA 5520 boxes setup - 1 is our live box and the otehr one is a failover.

These have been setup and running for a while and were working ok. But we have noticed that if we make a config change on one of the boxes the other box also got that change.

We backup the config on both of these boxes using KwiTools and have noticed that the config is now different on the backup back and it doesn't seam to be updated.

Anyone know what could be wrong?

Thanks

[Collin Clark]

Here's a link on verifying and troubleshooting the failover.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml#veri

Hope it helps.

[asmith1972]

Many thanks

I have entered the show failover and on the primary unit it says:

Failover Off

Failover unit Secondary

Failover LAN Interface: Failover GigabitEthernet0/0 (up)

Unit Poll frequency 1 seconds, holdtime 15 seconds

Interface Poll frequency 5 seconds, holdtime 25 seconds

Interface Policy 1

Monitored Interfaces 5 of 250 maximum

and the secondary one is:

Failover Off (pseudo-Standby)

Failover unit Primary

Failover LAN Interface: Failover GigabitEthernet0/0 (up)

Unit Poll frequency 1 seconds, holdtime 15 seconds

Interface Poll frequency 5 seconds, holdtime 25 seconds

Interface Policy 1

Monitored Interfaces 5 of 250 maximum

---

Do you know what the command is to turn this back on?

[kwillacey]

'failover lan enable' that should do it

[asmith1972]

thanks would I do this on box boxes or just the primary one.

If I do it on the primary will the config automatically copy over to the secondary

[kwillacey]

you should do it on both, im not 100% sure it would replicate the config automatically but you can do a write standby on the primary to get the config to replicate to the secondary.