ASA5520 and failover

[ReadersUK]

Hi

Just got my hands on two new asa5520's for the first time. I configured stateful failover/standby on G0/3 and it works fine. Now i wondered if i could have used the management interfaces instead. Anyone done this?

colin

[jwalker]

Yes. It works the exact same as if you used a normal interface. Here's a sample of one I did..

interface Management0/0

description LAN/STATE Failover Interface

failover

failover lan unit primary

failover lan interface fail Management0/0

failover polltime unit 5 holdtime 15

failover key *****

failover link fail Management0/0

failover interface ip fail 10.255.255.1 255.255.255.252 standby 10.255.255.2

Pls rate if this helps.

Cheers.

[cpembleton]

Just remember that it is only 10/100. The others are Gig nic's and if they are passing a lot of traffic the 10/100 may not be able to keep up with the stafeful data.

[jim]

How high are your xlates and connections per second?

I did mine on the management since our connections per second are below 200. I also configured it as active / active.

failover

failover lan unit primary

failover lan interface Management/0

failover interface ip FAILOVER 1.1.1.1 255.255.255.0 standby 1.1.1.2

failover group 1

failover group 2

secondary

context admin

join-failover-group 1