cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2504
Views
13
Helpful
2
Replies

Cannot assign Lan Failover link as statefull link ?

vibi83hrha
Level 1
Level 1

Hi ,

I was trying to assing statefull link as same as LAN failover link on ASA5520 with VPN Plus license.

But i am getting the below error. Can any experts advise me the reason for this. Is there any restriction in the license itself.

asa1(config)#

asa1(config)#

asa1(config)#

asa1(config)# failover lan interface LAN Gi0/2

asa1(config)#

asa1(config)# failover link STATE Gi0/2      

ERROR: interface already in use as failover interface

asa1(config)#

asa1(config)#

asa1(config)# sh version

Cisco Adaptive Security Appliance Software Version 8.0(3) <system>

Device Manager Version 6.4(5)

Compiled on Tue 06-Nov-07 22:59 by builders

System image file is "disk0:/asa803-k8.bin"

Config file at boot was "startup-config"

asa1 up 19 hours 19 mins

Hardware:   ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz

Internal ATA Compact Flash, 256MB

BIOS Flash Firmware Hub @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

                             Boot microcode   : CN1000-MC-BOOT-2.00

                             SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.01

                             IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.04

0: Ext: GigabitEthernet0/0  : address is 30e4.db7b.7c56, irq 9

1: Ext: GigabitEthernet0/1  : address is 30e4.db7b.7c57, irq 9

2: Ext: GigabitEthernet0/2  : address is 30e4.db7b.7c58, irq 9

3: Ext: GigabitEthernet0/3  : address is 30e4.db7b.7c59, irq 9

4: Ext: Management0/0       : address is 30e4.db7b.7c5a, irq 11

5: Int: Not used            : irq 11

6: Int: Not used            : irq 5

Licensed features for this platform:

Maximum Physical Interfaces  : Unlimited

Maximum VLANs                : 150      

Inside Hosts                 : Unlimited

Failover                     : Active/Active

VPN-DES                      : Enabled  

VPN-3DES-AES                 : Enabled  

Security Contexts            : 2        

GTP/GPRS                     : Disabled 

VPN Peers                    : 750      

WebVPN Peers                 : 2        

AnyConnect for Mobile        : Disabled 

AnyConnect for Linksys phone : Disabled 

Advanced Endpoint Assessment : Disabled 

This platform has an ASA 5520 VPN Plus license.

Serial Number: JMX1536X03A

Running Activation Key: 0x6827c069 0xd4594129 0xb8615d64 0x95b014e4 0x0d2c3dba

Configuration register is 0x1

Configuration last modified by enable_15 at 00:27:39.774 UTC Thu Oct 6 2011

asa1(config)#     

asa1(config)#

regards

vibin

2 Replies 2

Jennifer Halim
Cisco Employee
Cisco Employee

The name of both the LAN and the stateful failover interface needs to be the same as they are essentially referring to the same physical interface.

Currently you have assigned interface g0/2 with the name LAN for the failover interface, and you would also need to name it the same for the stateful failover link interface as follows:

failover lan interface LAN Gi0/2

failover link interface LAN Gi0/2

Hope this helps.

Thanks Jennifer

 

Your resolution solved my problem

Review Cisco Networking for a $25 gift card