Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have a single 5555-X firewall and want to know if it is feasible to convert this appliance into an active/passive deployment while not taking the current device out of action. I am able to get my hands on a second device that matches in all respects to the first device. Is it possible to configure failover links on the the initial device (while it is still performing as the operational firewall), plug in and attach the secondary unit and have the initial device push the active configuration to the standby and finally have HA on the network? My conundrum is not having the ability/permission to take the initial device out of service. Thanks!
yes that correct. as long as you match the software and hardware spec you should be good.
make sure configure the command on RUNNING production ASA as primary and do all the failover cabling and other standby ip address and cabling plus when it will come to ASA secondary give a command failover secondary. I think by default the ASA is in secondary mode. I shall double check and update you.
also remember very important. when the failover configuration are applied on both unit. do not give command "failover" on standby. make sure issue the "failover" command first on ASA primary than do it on secondary. doing this your secondary ASA will get the configuarion from primary ASA and become and HA pair.
yes that correct. as long as you match the software and hardware spec you should be good.
make sure configure the command on RUNNING production ASA as primary and do all the failover cabling and other standby ip address and cabling plus when it will come to ASA secondary give a command failover secondary. I think by default the ASA is in secondary mode. I shall double check and update you.
also remember very important. when the failover configuration are applied on both unit. do not give command "failover" on standby. make sure issue the "failover" command first on ASA primary than do it on secondary. doing this your secondary ASA will get the configuarion from primary ASA and become and HA pair.
Thank you for the quick reply. I was fairly confident we could configure a standby and place it inline with the active FW to create the HA environment, I just couldn't find the guide stating exactly that. Cheers!
Chris
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
