ASA Failover

[timwall01]

We have a pair of 5515 in active/failover.

There is a subinterface inside interface which on the primary  ASA shows as Normal, but failed on the Standby. From 'show failover' command

If we access the standby ASA and run the 'show failover' command the same inside interface shows as Normal on the Active and standby.

So why on the primary FW is the inside interface showing as failed on the output of the 'show failover' command on the standby ASA

[Karsten Iwen]

Some reasons that could cause this behavior are unidirectional communication or duplicate IP addresses.

Enable "debug icmp trace" and ping the other side to see if your pings reach the other side.

[timwall01]

I did try to ping but failed to respond.

[timwall01]

debug showed that pings are not being responded too

[Karsten Iwen · Accepted solution]

It's very likely that your problem is caused in your infrastructure and is unrelated to the ASA. Continue troubleshooting the complete way from the primary to the secondary ASA.