cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1132
Views
0
Helpful
4
Replies

ASA Failover and Slot 1

klivesey
Level 1
Level 1

Quick question Is there a way to disable the Slot 1 interface from failover?  Specifically I have an ASA Active Standby config with AIP-10's in Slot 1.  I would like to keep the failover config but not monitor slot 1.

Thanks,

4 Replies 4

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Klivesey,

No, there is no configuration for that specific task, the Security services modules being used by the ASA are always going to be monitored.

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

vipul.agrawal
Level 1
Level 1

Hi frnds,

In Cisco ASA failover, if both the boxes have AIP-SSM modules installed and AIP-SSM module on active unit gets failed then what's gonna happen as AIP-SSM don't take part in failover..please sugget !!

Thanks,

Vipul

Hello Vipul,

If both devices are using the IPS services and on the active unit it stops working failover is going to happen, both unit in failover will need to be running the same processes and in this case one will have the AIP-SSM on a good state (Stand by) while the other one will be not responding (Active) therefore failover will occur.

Please rate helpful posts.

Julio!!

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

svaish
Level 1
Level 1

It is not possibel to disable slot 1, you can remove the IPS if you want.

Review Cisco Networking products for a $25 gift card