cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
883
Views
0
Helpful
1
Replies

Can't failover ASA. Keeps failing back over on it's own

I keep trying to force the unit into active mode, but then it just goes right back into standby ready.

I'm not issuing any commands for this

From State To State Reason
==========================================================================
15:28:56 CDT Aug 10 2018
Not Detected Negotiation No Error

15:29:03 CDT Aug 10 2018
Negotiation Cold Standby Detected an Active mate

15:29:04 CDT Aug 10 2018
Cold Standby Sync Config Detected an Active mate

15:29:12 CDT Aug 10 2018
Sync Config Sync File System Detected an Active mate

15:29:12 CDT Aug 10 2018
Sync File System Bulk Sync Detected an Active mate

15:29:27 CDT Aug 10 2018
Bulk Sync Standby Ready Detected an Active mate

15:30:24 CDT Aug 10 2018
Standby Ready Just Active Other unit wants me Active

15:30:24 CDT Aug 10 2018
Just Active Active Drain Other unit wants me Active

15:30:24 CDT Aug 10 2018
Active Drain Active Applying Config Other unit wants me Active

15:30:24 CDT Aug 10 2018
Active Applying Config Active Config Applied Other unit wants me Active

15:30:24 CDT Aug 10 2018
Active Config Applied Active Other unit wants me Active

15:41:30 CDT Aug 10 2018
Active Standby Ready Other unit wants me Standby

 

 

The only thing I can think that has changed is on the current unit that is on standby, I've updated FirePower from 5.4 to 6.2. The other unit is still on 5.4 but I thought FirePower versions didn't have the match? The ASA and ASDM firmware matches.

1 Reply 1

Failover On
Failover unit Primary
Failover LAN Interface: folink GigabitEthernet1/7 (up)
Reconnect timeout 0:00:00
Unit Poll frequency 1 seconds, holdtime 15 seconds
Interface Poll frequency 5 seconds, holdtime 25 seconds
Interface Policy 1
Monitored Interfaces 5 of 60 maximum
MAC Address Move Notification Interval not set
failover replication http
Version: Ours 9.8(3), Mate 9.8(3)
Serial Number: Ours ***, Mate ***
Last Failover at: 15:41:30 CDT Aug 10 2018
This host: Primary - Standby Ready
Active time: 665 (sec)
slot 1: ASA5508 hw/sw rev (1.0/9.8(3)) status (Up Sys)
Interface OUTSIDE1 (***): Normal (Monitored)
Interface OUTSIDE2 (***): Normal (Monitored)
Interface INSIDE (10.254.10.2): Normal (Monitored)
Interface DMZ (10.10.100.2): Normal (Monitored)
slot 2: SFR5508 hw/sw rev (N/A/6.2.2-81) status (Up/Up)
ASA FirePOWER, 6.2.2-81, Up, (Not-Monitored)
slot 2: SFR5508 hw/sw rev (N/A/6.2.2-81) status (Up/Up)
ASA FirePOWER, 6.2.2-81, Up, (Not-Monitored)
Other host: Secondary - Active
Active time: 1756 (sec)
slot 1: ASA5508 hw/sw rev (1.0/9.8(3)) status (Up Sys)
Interface OUTSIDE1 (**): Normal (Monitored)
Interface OUTSIDE2 (***): Normal (Monitored)
Interface INSIDE (10.254.10.1): Normal (Monitored)
Interface DMZ (10.10.100.1): Normal (Monitored)
slot 2: SFR5508 hw/sw rev (N/A/5.4.1.6-37) status (Up/Up)
ASA FirePOWER, 5.4.1.6-37, Up, (Not-Monitored)
slot 2: SFR5508 hw/sw rev (N/A/5.4.1.6-37) status (Up/Up)
ASA FirePOWER, 5.4.1.6-37, Up, (Not-Monitored)

Review Cisco Networking products for a $25 gift card