Firewall failover configuration

[Mohd Imtiaz Hussain]

Hi,

Can you share the failover configuration for ASA firewall. Incase if any of the interface on primary(active) firewall fails it should switch over to secondary(standby) host.

[Joel]

Full configuration with stateful failover.

PRIMARY

failover
failover lan unit primary
failover lan interface folink GigabitEthernet0/6
failover key *********
failover link stateful GigabitEthernet0/7
failover interface ip folink 192.168.254.25 255.255.255.252 standby 192.168.254.26
failover interface ip stateful 192.168.254.17 255.255.255.252 standby 192.168.254.18
monitor-interface outside
monitor-interface inside

SECONDARY

failover
failover lan unit secondary
failover lan interface folink GigabitEthernet0/6
failover key ******
failover interface ip folink 192.168.254.25 255.255.255.252 standby 192.168.254.26

Joel

[Rishabh Seth]

Hi Mohd,

By default asa monitors its physical interfaces and monitoring for sub-interfaces is disabled in failover setup. 

Refer following link:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/failover.html#wp1073911

-RS.

Rate if it helps