08-25-2010 02:32 PM - edited 03-11-2019 11:30 AM
setting up redundant 5510's with an outside interface an inside interface and a dmz interface. The question is, will the standby unit go to active if ANY of the 3 interfaces goes down? i.e. if the primary interface f0/2 nameif dmz goes down, will the standby unit go active? or does it take the inside or outside interface for to go down before it switches over?
08-25-2010 03:12 PM
Hello,
By default, a single interface failure causes failover. You can specify a specific number of interfaces or a percentage of monitored interfaces that must fail before a failover occurs.
To change the default failover criteria, enter the following command in global configuration mode:
hostname(config)# failover interface-policy num[%]
This is mentioned in the ASA configuration guide here:
http://www.cisco.com/en/US/partner/docs/security/asa/asa80/configuration/guide/failover.html#wp1075905
Hope that helps!
08-25-2010 03:16 PM
So by default, any single interface failing will cause fail over? (which is what I want)
08-25-2010 03:26 PM
Hello,
Yes, that is correct. By default, if a failure occurs on any single interface that is being monitored, a failover will occur.
Are you using physical interfaces on the ASA or logical subinterfaces? If you are using physical interfaces, then by default all physical interfaces are monitored for failover. This is mentioned here:
By default, monitoring physical interfaces is enabled and monitoring subinterfaces is disabled.
If you are using logical subinterfaces, then you will specially need to enable monitoring with the command:
monitor-interface
Thanks!
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: