Cisco ASA Active/standby failover

[veonwu0702]

Hi ,

I had an issue on testing the failover when only one interface in active unit fails.

The configuration guide mention that by default, single interface failure can trigger failover,

however,it didn't work during my testing. instead, two interfaces failure can trigger failover.

I have set the interface policy number of failed interfaces that triggers failover to "1" or "10%" , it didn't work.

Can anyone advise ?

Thanks

[gouravbathla]

Hi

Use

show monitor-interface

The interface shown under this will trigger failover.

You can add or remove interface by

monitor-interface if_name

no monitor-interface if_name

[Jouni Forss]

Hi,

Also, to my understanding by default if you have a single interface (without subinterfaces) it will cause a failover

If you happen to have that single physical interface configured as Trunk (with subinterfaces), it wont trigger a failover.

The above mentioned monitor-interface command in that situation enables the failover monitoring for the subinterfaces on the trunk.

- Jouni