10-05-2015 09:16 AM - edited 03-11-2019 11:41 PM
Very odd issue. We had 1 X 5510 ASA on version 8.3(2) after a power supply burned out we bought 2 more 5510 ASA. Backed up the config from the old 5510 installed the same config on the new ASA and up graded the IOS to 9.16-8-k8. and Set up the fail over. Fail over works in active/passive config fine. Also enable the email feature to email my email address when it fails over.
All working in the testing environment, but when we put this live the only server out of 5 that doesn't work is the one that has the shared folders on. This server is a Win2003. And you can't RDP to this server either when connected to the 2 new ASA's?? but as soon as you plug the old ASA back in work within seconds so it can only related to the new ASA and the version of IOS right??
I am hoping somebody can shed some light on this as we are are stumped and has been for a few days now. All help appreciated
10-05-2015 11:37 PM
If the configuration is all same and still the windows machine does not work with the new ASA hardware then probably there is stale arp entry on the windows machine which points to the MAC address of your old ASA.
You should try clearing arp on the windows server and check connectivity with the new ASA.
Hope it helps!!!
Thanks,
R.Seth
Don't forget to mark the answer as correct if it helps in resolving your query!!!
10-06-2015 03:47 AM
Thanks for the reply, after some digging what we found was that the arp table with the new asa in place shows the same mac address several times as per attachment(2015-10-06_1048.png). This mac address is the primary asa for fail over's mac address
But when on the old asa this is not the case as what the 2 txt files show. This is the same as when we do a clear arp on the servers as well as the old and new asa
So yes still stumped.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide