ASA (active/standby) to WLC (Guest Anchor)

[nathan.ollis]

Having a lot of trouble with this...even with Advanced Services helping.  We are trying to put a guest anchor controller out off of a active/standby 5555-X pair, with a SourceFire 7150 appliance (TAP mode, just passing traffic) between.  TAC and AS suggested to put it in LAG mode, build a port channel with a single member on the ASA.  Its really weird, I can ping from one of our cores, but not the other.  

Show monitor-interface shows that failed (waiting) on the new interface.  If you get on the standby ASA, you can ping the secondary address...but not the primary and vice versa. 

Any advice?

[nathan.ollis]

Just an FYI this will not work in the end...took a TAC collaboration, which took a while.  The WLC ports are not smart enough to know when to use the other port when the ASAs failover.