cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
245
Views
0
Helpful
2
Replies

Firewall failover configuration

Hi,

Can you share the failover configuration for ASA firewall. Incase if any of the interface on primary(active) firewall fails it should switch over to secondary(standby) host.

2 Replies 2

Joel
Level 1
Level 1

Full configuration with stateful failover.

PRIMARY

failover
failover lan unit primary
failover lan interface folink GigabitEthernet0/6
failover key *********
failover link stateful GigabitEthernet0/7
failover interface ip folink 192.168.254.25 255.255.255.252 standby 192.168.254.26
failover interface ip stateful 192.168.254.17 255.255.255.252 standby 192.168.254.18
monitor-interface outside
monitor-interface inside

SECONDARY

failover
failover lan unit secondary
failover lan interface folink GigabitEthernet0/6
failover key ******
failover interface ip folink 192.168.254.25 255.255.255.252 standby 192.168.254.26

Joel

Rishabh Seth
Level 7
Level 7

Hi Mohd,

By default asa monitors its physical interfaces and monitoring for sub-interfaces is disabled in failover setup. 

Refer following link:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/failover.html#wp1073911

-RS.

Rate if it helps

Review Cisco Networking for a $25 gift card