10-06-2011 12:34 AM - edited 03-11-2019 02:34 PM
Hi ,
I was trying to assing statefull link as same as LAN failover link on ASA5520 with VPN Plus license.
But i am getting the below error. Can any experts advise me the reason for this. Is there any restriction in the license itself.
asa1(config)#
asa1(config)#
asa1(config)#
asa1(config)# failover lan interface LAN Gi0/2
asa1(config)#
asa1(config)# failover link STATE Gi0/2
ERROR: interface already in use as failover interface
asa1(config)#
asa1(config)#
asa1(config)# sh version
Cisco Adaptive Security Appliance Software Version 8.0(3) <system>
Device Manager Version 6.4(5)
Compiled on Tue 06-Nov-07 22:59 by builders
System image file is "disk0:/asa803-k8.bin"
Config file at boot was "startup-config"
asa1 up 19 hours 19 mins
Hardware: ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash Firmware Hub @ 0xffe00000, 1024KB
Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.01
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.04
0: Ext: GigabitEthernet0/0 : address is 30e4.db7b.7c56, irq 9
1: Ext: GigabitEthernet0/1 : address is 30e4.db7b.7c57, irq 9
2: Ext: GigabitEthernet0/2 : address is 30e4.db7b.7c58, irq 9
3: Ext: GigabitEthernet0/3 : address is 30e4.db7b.7c59, irq 9
4: Ext: Management0/0 : address is 30e4.db7b.7c5a, irq 11
5: Int: Not used : irq 11
6: Int: Not used : irq 5
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 150
Inside Hosts : Unlimited
Failover : Active/Active
VPN-DES : Enabled
VPN-3DES-AES : Enabled
Security Contexts : 2
GTP/GPRS : Disabled
VPN Peers : 750
WebVPN Peers : 2
AnyConnect for Mobile : Disabled
AnyConnect for Linksys phone : Disabled
Advanced Endpoint Assessment : Disabled
This platform has an ASA 5520 VPN Plus license.
Serial Number: JMX1536X03A
Running Activation Key: 0x6827c069 0xd4594129 0xb8615d64 0x95b014e4 0x0d2c3dba
Configuration register is 0x1
Configuration last modified by enable_15 at 00:27:39.774 UTC Thu Oct 6 2011
asa1(config)#
asa1(config)#
regards
vibin
10-06-2011 08:09 PM
The name of both the LAN and the stateful failover interface needs to be the same as they are essentially referring to the same physical interface.
Currently you have assigned interface g0/2 with the name LAN for the failover interface, and you would also need to name it the same for the stateful failover link interface as follows:
failover lan interface LAN Gi0/2
failover link interface LAN Gi0/2
Hope this helps.
09-28-2014 03:07 AM
Thanks Jennifer
Your resolution solved my problem
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide