Unable to ping anything from Secondary Firewall

[Firepowered]

I have two ASAs in Active / Standby Failover, I can not ping anything from secondary firewall, here is my failover config:

failover
failover lan unit primary
failover lan interface Failover GigabitEthernet1/3
failover key *****
failover interface ip Failover 172.16.211.200 255.255.255.0 standby 172.16.211.199

I can SSH / ASDM to the secondary, it is reachable, but once I login, I can't ping anything.

My interfaces are all configured in port channel / sub interface, example:

interface Port-channel1.45
vlan 45
nameif inside
security-level 100
ip address 192.168.1.20 255.255.255.0

we have no stand by IP addresses any interface except management, could it be because of this?

But doesn't sound plausible, because I have exact same config on my DC firewall, and pings work from secondary firewall

Let me know if you need some other config to troubleshoot.

Also, when I launch ASDM, and ping 8.8.8.8, it doesn't and also i don't see any live traffic in "Monitoring > Logging > VIew"

[johnd2310]

Hi

You need to configure the standby ip address.

How do you ssh to the secondary unit?

Thanks

John

[Firepowered]

Except for management and outside interface, there are no standby ip addresses (should have mentioned that)

On my DC, the configuration is similar, as in, management interface has stadnby and nothing else, but everything works!

[johnlloyd_13 · Accepted solution]

hi,

this is an expected behavior since there's no standby IP explicitly configured on the standby FW 'outside' and 'inside' interfaces.

the standby FW will only get an IP from the primary/active after a fail over. once standby FW becomes active, it should be able to ping the internet.