CISCO ASA 5520 - ssh/telnet issues in failover pair

[octcadmin]

Ever since i have setup 2 ASA 5520's in a failover state. i cannot telnet or ssh to either device. if i reboot them it starts to work again, but not for long. does anyone know why this is occuring?

[manish arora]

Hi Wayne,

This would be helpful to you :-

https://supportforums.cisco.com/message/3252733?tstart=0

Thanks

Manish

[octcadmin]

Thanks Manish,

I saw this before, it affects both units, and yes if i reload them it starts to work again. but i dont want to have to reload the device every time i need to connect to them.

[praprama]

Hi,

What verison is your device running? Also, please check the output of show asp table socket and verify if there is a socket for the interfaces you are trying to connect to.

Cheers,

Prapanch

[octcadmin]

Thanks for the response.

ASA 8.2(3)

ASDM 6.3(4)53

Protocol  Socket    Local Address               Foreign Address         State
TCP       00018f5f  192.168.x.x:22             0.0.0.0:*               LISTEN
TCP       00084daf  192.168.x.x:23             0.0.0.0:*               LISTEN
SSL       00086eef  192.168.x.x:443            0.0.0.0:*               LISTEN
SSL       00088a9f  192.168.x.x:443             0.0.0.0:*               LISTEN

There is a port listening for both port 22 and 23.

i can get to the ASDM on both devices and when i try to telnet it prompts for password but doesnt accept the password.

[praprama]

Hi,

Sorry for a delayed response. So am i correct in assuming when you reload the ASA it starts accepting the password for a while?

Thanks and Regards,

Prapanch

[octcadmin]

Yes if i reload either device, i can ssh or telnet once to that

box. once i close the ssh or telnet window it will not allow me to ssh or tel

net again untill i reload the unit.

Thanks

[praprama]

When you are unable to telnet/ssh, what does the output of "show resource usage" look like?

Cheers,

Prapanch