CSC 6.6.1125.0 with ASA5520 8.4(4)1

[Toi Seng Chang]

Hi All,

Did someone met the following log message on secondary ASA console output when turning on the ASA failover function?

"Mate's service module (CSC SSM 6.6.1125.0) on slot 1 is different from mine (CSC SSM 6.6.1125.0)"

After that the secondary cannot join as a failover unit and shows in disabled status.

We have the same model ASA & CSC module and each pair of them are in same firmware (CSC 6.6.1125.0 with ASA5520 8.4(4)1), when I shutdown both the csc modules, the ASA failover works fine.

Any Suggestions/Help?

Thanks.

[varrao]

Can you provide an output of "shwo module 1 detail" from both the ASA's?

Thanks,
Varun Rao
Security Team,
Cisco TAC

[Toi Seng Chang]

Hi Varun,

Okay, I will try to get the information and update you later. Thanks.

[Toi Seng Chang]

Hi Varun,

FYI

EDIFFW1 is the primary ASA and EDIFFW2 is the secondary one.

[Toi Seng Chang]

Hi Varun,

Any good news?

[lcambron]

You might be hitting this bug:

CSCty47007            Bug Details

CSC: Secondary goes to pseudo standby state when failover is enabled

Symptom: When failover is enabled, the secondary goes to pseudo standby state.Conditions: service module (CSC SSM 6.6.1125.0 or later) is used on ASA.Workaround: None

More information:

ASA complains that the CSC modules are different.  
     Detected an Active mate
Mate's service module (CSC SSM 6.6.1125.0) on slot 1 is different from mine (CSC SSM 6.6.1125.0).

This has been fixed in 8.4.4.2 but the latest available release on Cisco.com is 8.4.4.1

I would suggest you to open a TAC case for someone to publish you version 8.4.4.2 or 8.4.4.5

Regards,

Felipe.

[Toi Seng Chang]

Hi Icambron,

Thanks for your response.

Is it the the bug only happens in CSC 6.6.1125.0 with ASA5520 8.4(4).1 ?

Because once I upgrade the ASA to 8.4(4).1, the problems happens even with CSC 6.3, thus I tried to upgrade to CSC 6.6.1125.0 but with no luck.

BTW, is 8.4.4.2 / 8.4.4.5 a stable release? will we met any other bug there?

Please kindly advise.

[lcambron]

Toi,

The issue has been seem with CSC 6.6.1125.0, however this is a bug on the ASA and not on the CSC module, which would explain why it happens on 6.3 and 6.6.

Version 8.4.4.5 is pretty stable and has been tested, it is hard to know if you will hit another bug but you shouldn't hit any.

Regards,

Felipe.

[gurpsin2]

Hi Tod,

You are hitting the bug CSCty47007, which is fixed in 8.4.4.2 but since 8.4.4.2 is now not continued, you could contact TAC to get version 8.4.4.5 which has the fix.

Sent from Cisco Technical Support iPhone App