Solved: Re: ASA 8.4 failover interface testing issue

sudharsan rangasamy · ‎01-04-2012

Team

From ASA 5520 we tested the interface failover it not working even the interface are getting monitor .

primary is active.

Manually we shut the outside interface of the primary device configuration is getting reflecting in secondary as outside interface shut. Interface failover not happen.

ii All the interface are getting monitor when we gave command sh failover. even though when we shut outside interface failove not happening.

kindly tell us how to do the interface failover in ASA 8.4 version.

Regards

Sudharsan.R

varrao · ‎01-04-2012

Do you have the interfaces as monitored interface, can you provide the output of "show run failover" and "shwo failover"

Thanks,

Varun

Thanks,
Varun Rao

View solution in original post

varrao · ‎01-04-2012

Do you have the interfaces as monitored interface, can you provide the output of "show run failover" and "shwo failover"

Thanks,

Varun

Thanks,
Varun Rao

sudharsan rangasamy · ‎01-05-2012

hi varun here is the output

xxxxx-asa-01/pri/act# sh failover

Failover On

Failover unit Primary

Failover LAN Interface: xover GigabitEthernet0/3 (up)

Unit Poll frequency 1 seconds, holdtime 3 seconds

Interface Poll frequency 3 seconds, holdtime 15 seconds

Interface Policy 1

Monitored Interfaces 6 of 160 maximum

Version: Ours 8.4(2)8, Mate 8.4(2)8

Last Failover at: 16:39:29 UTC Jan 4 2012

This host: Primary - Active

Active time: 5511130 (sec)

slot 0: ASA5520 hw/sw rev (2.0/8.4(2)8) status (Up Sys)

Interface CW-Internet-delivery (62.208.154.20): Normal (Monitored)

Interface WAN-transit (192.168.40.4): Normal (Monitored)

Interface Platform-Management (10.13.48.138): Normal (Monitored)

Interface Colo (10.128.128.193): Normal (Monitored)

Interface Blue-Coat-outer (10.128.128.65): Normal (Monitored)

Interface Blue-Coat-inner (10.128.128.33): Normal (Monitored)

slot 1: ASA-SSM-4GE hw/sw rev (1.0/1.0(0)10) status (Up)

Other host: Secondary - Standby Ready

Active time: 249370 (sec)

slot 0: ASA5520 hw/sw rev (2.0/8.4(2)8) status (Up Sys)

Interface CW-Internet-delivery (62.208.154.21): Normal (Monitored)

Interface WAN-transit (192.168.40.5): Normal (Monitored)

Interface Platform-Management (10.13.48.139): Normal (Monitored)

Interface Colo (10.128.128.194): Normal (Monitored)

Interface Blue-Coat-outer (10.128.128.66): Normal (Monitored)

Interface Blue-Coat-inner (10.128.128.34): Normal (Monitored)

slot 1: ASA-SSM-4GE hw/sw rev (1.0/1.0(0)10) status (Up)

Stateful Failover Logical Update Statistics

Link : xover GigabitEthernet0/3 (up)

Stateful Obj xmit xerr rcv rerr

General 6286980409 0 3594275 0

sys cmd 734957 0 734957 0

up time 0 0 0 0

RPC services 0 0 0 0

TCP conn 4884205 0 6947 0

UDP conn 11249789 0 8428 0

ARP tbl 6270111331 0 2843941 0

Xlate_Timeout 0 0 0 0

IPv6 ND tbl 0 0 0 0

VPN IKEv1 SA 0 0 0 0

VPN IKEv1 P2 0 0 0 0

VPN IKEv2 SA 76 0 0 0

VPN IKEv2 P2 12 0 0 0

VPN CTCP upd 0 0 0 0

VPN SDI upd 0 0 0 0

VPN DHCP upd 0 0 0 0

SIP Session 0 0 0 0

Route Session 0 0 0 0

User-Identity 39 0 2 0

Logical Update Queue Information

Cur Max Total

Recv Q: 0 250 3601771

Xmit Q: 0 1485 6293432921

xxxxx-asa-01/pri/act#

xxx-asa-01/pri/act# sh runn failover

failover

failover lan unit primary

failover lan interface xover GigabitEthernet0/3

failover polltime unit 1 holdtime 3

failover polltime interface 3 holdtime 15

failover link xover GigabitEthernet0/3

failover interface ip xover 10.99.99.1 255.255.255.252 standby 10.99.99.2

xxxxxx-asa-01/pri/act#

sudharsan rangasamy · ‎01-05-2012

please see the output of the device and reply still we face the same issue when we shut the bluecoat outer interface failover not happening.

Regards

Sudharsan.R