10-28-2011 04:43 AM - edited 03-11-2019 02:43 PM
Hi.
I have a problem with failover. On My site I have 2 Firewalls 5580. And I did this configuration on my firewall.
interface GigabitEthernet3/0
description LAN/STATE Failover Interface
speed nonegotiate
failover
failover lan unit secondary
failover lan interface failover+stateful GigabitEthernet3/0
failover polltime unit 1 holdtime 10
failover polltime interface 2 holdtime 10
failover key *****
failover replication http
failover link failover+stateful GigabitEthernet3/0
failover interface ip failover+stateful 10.215.253.181 255.255.255.252 standby 10.215.253.182
I want to monitoring one interface but when I put this interface on monitoring the interface still in waiting state..
pri/act/MZ-IT-C1-FW-013-A# sh failover
Failover On
Failover unit Primary
Failover LAN Interface: failover+stateful GigabitEthernet3/0 (up)
Unit Poll frequency 1 seconds, holdtime 10 seconds
Interface Poll frequency 2 seconds, holdtime 10 seconds
Interface Policy 1
Monitored Interfaces 3 of 256 maximum
failover replication http
Version: Ours 8.2(3), Mate 8.2(3)
Last Failover at: 02:36:03 HoVerao Oct 26 2011
This host: Primary - Active
Active time: 10799820 (sec)
slot 0: ASA5580 hw/sw rev (1.0/8.2(3)) status (Up Sys)
Interface noc (10.215.113.55): Normal (Not-Monitored)
Interface soc (10.215.128.4): Normal (Not-Monitored)
Interface bovespa (10.215.252.108): Normal (Not-Monitored)
Interface cma (10.215.252.116): Normal (Not-Monitored)
Interface insidecam1 (10.215.253.201): Normal (Waiting)
Interface corp (10.215.253.84): Normal
Interface outside (10.215.253.140): Normal
Other host: Secondary - Standby Ready
Active time: 257330 (sec)
slot 0: ASA5580 hw/sw rev (1.0/8.2(3)) status (Up Sys)
Interface noc (10.215.113.56): Normal (Not-Monitored)
Interface soc (10.215.128.5): Normal (Not-Monitored)
Interface bovespa (10.215.252.109): Normal (Not-Monitored)
Interface cma (10.215.252.117): Normal (Not-Monitored)
Interface insidecam1 (10.215.253.202): Normal
Interface corp (10.215.253.85): Normal
Interface outside (10.215.253.141): Normal
Stateful Failover Logical Update Statistics
Link : failover+stateful GigabitEthernet3/0 (up)
Stateful Obj xmit xerr rcv rerr
General 37311057710 0 5846984 288020467
sys cmd 1474140 0 1474137 0
up time 0 0 0 0
RPC services 0 0 0 0
TCP conn 36211969608 0 865236 280261214
UDP conn 1001804778 0 220454 7757354
ARP tbl 95809184 0 3287157 1899
Xlate_Timeout 0 0 0 0
IPv6 ND tbl 0 0 0 0
VPN IKE upd 0 0 0 0
VPN IPSEC upd 0 0 0 0
VPN CTCP upd 0 0 0 0
VPN SDI upd 0 0 0 0
VPN DHCP upd 0 0 0 0
SIP Session 0 0 0 0
Logical Update Queue Information
Cur Max Total
Recv Q: 0 11 6106431
Xmit Q: 0 2 37321869413
What could be the couse of this issue?
If someone help me with this case, I'll be very grateful.
Thank you very much.
10-30-2011 06:01 AM
Interface insidecam1 (10.215.253.202): Normal
Are both these interfaces in the same vlan?
Can 10.215.253.202 ping 10.215.253.201?
Can 10.215.253.201 ping 10.215.253.202?
If you monitor another interface besides insidecam1 do those interfaces on both units show Normal and not Normal waiting?
-Kureli
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide