Hello all,
I have a question about the following Cisco ASA failover scenario. Let's say, it's a very simple lab scenery:
ASA1 (active) -> failover link GE 0/0 IP 10.10.10.1 -> interface 3 [switch1] interface 4 <- failover link GE 0/0 IP 10.10.10.2 <- ASA2 (standby)
ASA1 (active) -> inside interface GE 0/1.10 IP 192.168.50.254 -> interface 20 [switch2] interface 21 <- inside interfase GE 0/1.10 IP 10.168.50.253 (standby) <- ASA2
So, the idea is that failover link of ASA devices connect through switch1, inside interfaces connect to switch2. Inside interface is a subinterface actually and it is monitored for failover. What happens, if someone misconfigures port 20 on switch2 and layer3 connectivity goes down? Let's say, there's a wrong VLAN now on port 20. Will ASA sense this and failover to standby device? Or will it be ignorant about this as it's own interface is healthy?
Thank you for your thoughts in advance!