ASA Failover Criteria

[fatalXerror]

Hi Experts,

Good Day!

I'm a little bit confused about the criteria of the ASA as far as the failover is concerned. By default, the criteria is only 1 interface, is this means that let us say I have 5 interfaces = VLAN = nameifs and my ASA is in Active/Standby failover, when just only 1 interface goes down, all of my VLANs will transition to the secondary ASA which is now Active?

Or just that 1 interface will transition to the secondary ASA since the others are still up?

Thank you and have a nice day!

Cheers,

Niks

[Karsten Iwen]

Active/Standby Failover on the ASA means that one unit is active and the other is standby. If the active unit fails or has at least one failed and monitored interface, the active role is (completely) taken by the standby unit.

[fatalXerror]

Hi,

Oh no, because I have already running active/standby ASA in production and we are planning to configure additional available physical interface. If that is the case, my ASA will failover right?

Thanks,

[Karsten Iwen]

No, first you cable your new interface on both ASAs.Then you configure the new interface and when you "no shut" it, then the new interface will come up on both ASAs and there is no need to fail over.