cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
647
Views
0
Helpful
1
Replies

Failover Active/Standby

d_steffen
Level 1
Level 1

Hi.

I have a problem with failover. On My site I have 2 Firewalls 5580. And I did this configuration on my firewall.

interface GigabitEthernet3/0

description LAN/STATE Failover Interface

speed nonegotiate

failover
failover lan unit secondary
failover lan interface failover+stateful GigabitEthernet3/0
failover polltime unit 1 holdtime 10
failover polltime interface 2 holdtime 10
failover key *****
failover replication http
failover link failover+stateful GigabitEthernet3/0
failover interface ip failover+stateful 10.215.253.181 255.255.255.252 standby 10.215.253.182

I want to monitoring one interface but when I put this interface on monitoring the interface still in waiting state..

pri/act/MZ-IT-C1-FW-013-A# sh failover

Failover On

Failover unit Primary

Failover LAN Interface: failover+stateful GigabitEthernet3/0 (up)

Unit Poll frequency 1 seconds, holdtime 10 seconds

Interface Poll frequency 2 seconds, holdtime 10 seconds

Interface Policy 1

Monitored Interfaces 3 of 256 maximum

failover replication http

Version: Ours 8.2(3), Mate 8.2(3)

Last Failover at: 02:36:03 HoVerao Oct 26 2011

        This host: Primary - Active

                Active time: 10799820 (sec)

                slot 0: ASA5580 hw/sw rev (1.0/8.2(3)) status (Up Sys)

                  Interface noc (10.215.113.55): Normal (Not-Monitored)

                  Interface soc (10.215.128.4): Normal (Not-Monitored)

                  Interface bovespa (10.215.252.108): Normal (Not-Monitored)

                  Interface cma (10.215.252.116): Normal (Not-Monitored)

                  Interface insidecam1 (10.215.253.201): Normal (Waiting)

                  Interface corp (10.215.253.84): Normal

                  Interface outside (10.215.253.140): Normal

        Other host: Secondary - Standby Ready

                Active time: 257330 (sec)

                slot 0: ASA5580 hw/sw rev (1.0/8.2(3)) status (Up Sys)

                  Interface noc (10.215.113.56): Normal (Not-Monitored)

                  Interface soc (10.215.128.5): Normal (Not-Monitored)

                  Interface bovespa (10.215.252.109): Normal (Not-Monitored)

                  Interface cma (10.215.252.117): Normal (Not-Monitored)

                  Interface insidecam1 (10.215.253.202): Normal

                  Interface corp (10.215.253.85): Normal

                  Interface outside (10.215.253.141): Normal

Stateful Failover Logical Update Statistics

        Link : failover+stateful GigabitEthernet3/0 (up)

        Stateful Obj    xmit       xerr       rcv        rerr     

        General         37311057710 0          5846984    288020467

        sys cmd         1474140    0          1474137    0        

        up time         0          0          0          0        

        RPC services    0          0          0          0        

        TCP conn        36211969608 0          865236     280261214

        UDP conn        1001804778 0          220454     7757354  

        ARP tbl         95809184   0          3287157    1899     

        Xlate_Timeout   0          0          0          0        

        IPv6 ND tbl     0          0          0          0        

        VPN IKE upd     0          0          0          0        

        VPN IPSEC upd   0          0          0          0        

        VPN CTCP upd    0          0          0          0        

        VPN SDI upd     0          0          0          0        

        VPN DHCP upd    0          0          0          0        

        SIP Session     0          0          0          0        

        Logical Update Queue Information

                        Cur     Max     Total

        Recv Q:         0       11      6106431

        Xmit Q:         0       2       37321869413

What could be the couse of this issue?

If someone help me with this case, I'll be very grateful.

Thank you very much.

1 Reply 1

Kureli Sankar
Cisco Employee
Cisco Employee

Interface insidecam1 (10.215.253.202): Normal

Are both these interfaces in the same vlan?

Can 10.215.253.202 ping 10.215.253.201?

Can 10.215.253.201 ping 10.215.253.202?

If you monitor another interface besides insidecam1 do those interfaces on both units show Normal and not Normal waiting?

-Kureli

Review Cisco Networking for a $25 gift card