Not consistent - ASA licensing

[Naveen Gupta]

What I am confused is that when I do 'show activation' it shows Active/Active does not matches with 'show failover' it shows Active/Passive.

Attached is the file for reference. Any help on this?

[Jennifer Halim]

Within the "show activation-key", the Active/Active means that it is capable of running the Active/Active failover (or licensed to perform Active/Active failover if configured to do so).

Active/Active failover needs the ASA to be in multiple context mode, and your ASA is configured in single mode, so it is Active/Passive failover that has been configured on it.

Hope that answers your question.

[Naveen Gupta]

How did you infer that the ASA is configured in single mode?

[Jennifer Halim · Accepted solution]

The "show failover" output doesn't show the context information (it will show the 2 failover groups if it's in multiple context mode).

Here is an example when it's in Active/Active mode:

hostname# show failover

Failover On

Failover unit Primary

Failover LAN Interface: folink GigabitEthernet0/2 (up)

Unit Poll frequency 1 seconds, holdtime 15 seconds

Interface Poll frequency 4 seconds

Interface Policy 1

Monitored Interfaces 8 of 250 maximum failover replication http

Group 1 last failover at: 13:40:18 UTC Dec 9 2004

Group 2 last failover at: 13:40:06 UTC Dec 9 2004

  This host:    Primary

  Group 1       State:          Active

                Active time:    2896 (sec)

  Group 2       State:          Standby Ready

                Active time:    0 (sec)

                slot 0: ASA-5530 hw/sw rev (1.0/7.0(0)79) status (Up Sys)

                slot 1: SSM-IDS-20 hw/sw rev (1.0/5.0(0.11)S91(0.11)) status (Up)

                admin Interface outside (10.132.8.5): Normal

                admin Interface folink (10.132.9.5/fe80::2a0:c9ff:fe03:101): Normal

                admin Interface inside (10.130.8.5/fe80::2a0:c9ff:fe01:101): Normal

                admin Interface fourth (10.130.9.5/fe80::3eff:fe11:6670): Normal

                ctx1 Interface outside (10.1.1.1): Normal

                ctx1 Interface inside (10.2.2.1): Normal

                ctx2 Interface outside (10.3.3.2): Normal

                ctx2 Interface inside (10.4.4.2): Normal

  Other host:   Secondary

  Group 1       State:          Standby Ready

                Active time:    190 (sec)

  Group 2       State:          Active

                Active time:    3322 (sec)

                slot 0: ASA-5530 hw/sw rev (1.0/7.0(0)79) status (Up Sys)

                slot 1: SSM-IDS-20 hw/sw rev (1.0/5.0(0.1)S91(0.1)) status (Up)

                admin Interface outside (10.132.8.6): Normal

                admin Interface folink (10.132.9.6/fe80::2a0:c9ff:fe03:102): Normal

                admin Interface inside (10.130.8.6/fe80::2a0:c9ff:fe01:102): Normal

                admin Interface fourth (10.130.9.6/fe80::3eff:fe11:6671): Normal

                ctx1 Interface outside (10.1.1.2): Normal

                ctx1 Interface inside (10.2.2.2): Normal

                ctx2 Interface outside (10.3.3.1): Normal

                ctx2 Interface inside (10.4.4.1): Normal