cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


278
Views
15
Helpful
2
Replies
Participant

ASA failover key

Can I issue the "failover key" on an active ASA in an A/S HA pair without impacting service?  How would I get this command onto the other ASA because I assume that as soon as I issue the command on the active unit, I will break the failover pair and lose access to the standby unit.

 

Thanks in advance.

 

John

1 ACCEPTED SOLUTION

Accepted Solutions
Rising star

Re: ASA failover key

Hi John,

 

It would be recommended to add the failover in a controlled maintenance window even if you have out-of-band access to both devices.

The failover key needs to be added to both devices simultaneously, I mean add to both and execute almost at same time(press enter). Better do in a maintenance window, but from a functionality perspective, there is no such document which states that this can or can not be done during normal working hours.

 

As a good practice, any failover process related options should be planned.

FYI, I have seen people doing it on the fly and being successful, but its a call that you have to take.

 

HTH
AJ

 

 

View solution in original post

2 REPLIES 2
Rising star

Re: ASA failover key

Hi John,

 

It would be recommended to add the failover in a controlled maintenance window even if you have out-of-band access to both devices.

The failover key needs to be added to both devices simultaneously, I mean add to both and execute almost at same time(press enter). Better do in a maintenance window, but from a functionality perspective, there is no such document which states that this can or can not be done during normal working hours.

 

As a good practice, any failover process related options should be planned.

FYI, I have seen people doing it on the fly and being successful, but its a call that you have to take.

 

HTH
AJ

 

 

View solution in original post

Contributor

Re: ASA failover key

I agree that any change should be completed during maintenance window.