cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
18927
Views
6
Helpful
8
Replies

ASA cluster IFC failure

rubberheart
Level 1
Level 1

Hi, Team

we had an issue with the ASA failover 

the one should show standby , but it show failed

State Last Failure Reason Date/Time
This host - Secondary
Active None
Other host - Primary
Failed Ifc Failure 
inside: Failed

could you help to undertand what is the IFC failure? I check the inside interface ,  all clear . also , I checked the switch side L2 status , all clear as well

thanks for your help!

regards

Daniel

2 Accepted Solutions

Accepted Solutions

nspasov
Cisco Employee
Cisco Employee

Hi Daniel-

Can you please post the output from the following commands:

show failover

show failover history

show failover state

Also, can you check the inside interfaces on both units and make sure that they are in the same VLAN, same duplex, speed, etc. 

Thank you for rating helpful posts!

View solution in original post

Fantastic! Glad that you were able to resolve your own issue! :)

Now, since your issue is resolved, you should mark the thread as "answered" :)

View solution in original post

8 Replies 8

nspasov
Cisco Employee
Cisco Employee

Hi Daniel-

Can you please post the output from the following commands:

show failover

show failover history

show failover state

Also, can you check the inside interfaces on both units and make sure that they are in the same VLAN, same duplex, speed, etc. 

Thank you for rating helpful posts!

Thanks , Neno.

there are some other L2 inline devices which cause this issue.

we will fix that , but still thanks for your kindly help !

Fantastic! Glad that you were able to resolve your own issue! :)

Now, since your issue is resolved, you should mark the thread as "answered" :)

ya , you got me :)

What resolved the issue? I have the same issue and the commands given just verify the secondary is failed

Hi,
Is it possible that interface input errors can cause the "Standby Ready Ifc Failure" for certain interfaces?
I am facing the same issue, during the peak hours 3 interface monitoring fail and then I have to remove them manually from the active FW with the command "no monitor-interface XXXXX". I have doubt that input errors on the Active firewall are causing this problem.
Please advise.

Regards.

AlanPerry7196
Level 1
Level 1

What did you do to resolve the issue?

¿Cual fue la solucion del incidente? Tengo el mismo problema

 

Result of the command: "show failover state"

State Last Failure Reason Date/Time
This host - Secondary
Active None
Other host - Primary
Standby Ready Ifc Failure 09:51:25 ART May 26 2022
telefonica: Failed

====Configuration State===
Sync Done - STANDBY
====Communication State===
Mac set

------------------------------------------------------

Result of the command: "sh int e1/8"

Interface Ethernet1/8 "telefonica", is up, line protocol is up
Hardware is EtherSVI, BW 1000 Mbps, DLY 10 usec
Description: To Telefonica MPLS
MAC address 4c71.0dcc.d4ee, MTU 1500
IP address 172.30.0.1, subnet mask 255.255.255.248
Traffic Statistics for "telefonica":
32572537950 packets input, 23534103187580 bytes
28369000300 packets output, 7727151657667 bytes
175263387 packets dropped
1 minute input rate 8944 pkts/sec, 5671797 bytes/sec
1 minute output rate 8158 pkts/sec, 2903794 bytes/sec
1 minute drop rate, 55 pkts/sec
5 minute input rate 9395 pkts/sec, 6102341 bytes/sec
5 minute output rate 8899 pkts/sec, 3309832 bytes/sec
5 minute drop rate, 66 pkts/sec

---------------------------------------------------------------

Result of the command: "sh run int e1/8"

!
interface Ethernet1/8
description To Telefonica MPLS
nameif telefonica
security-level 60
ip address 172.30.0.1 255.255.255.248 standby 172.30.0.3

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: