ASA pair configured with failover and redundant interfaces

[fsebera]

In an ASA redundant interface configuration, is there any way to designate which physical interface is the active of the redundant pair for the Active as-well-as the standby?

Thanks

Frank

[Marvin Rhoads · Accepted solution]

You can designate which interface is active. Whatever designation you make will be synchronized across the Active and Standby appliances in the HA failover pair.

Cisco explains it here:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/interface_start.html#19964

... as follows:

Changing the Active Interface

By default, the active interface is the first interface listed in the configuration, if it is available. To view which interface is active, enter the following command:

ciscoasa# show interface redundantnumber detail | grep Member

 

For example:

ciscoasa# show interface redundant1 detail | grep Member

Members GigabitEthernet0/3(Active), GigabitEthernet0/2

 

To change the active interface, enter the following command:

ciscoasa# redundant-interface redundantnumber active-member physical_interface

 

where the redundant number argument is the redundant interface ID, such as redundant1 .

The physical_interface is the member interface ID that you want to be active.

[fsebera]

Excellent and Thank you

Frank