05-19-2017 08:18 PM - edited 03-12-2019 02:23 AM
trying to add a new 5525 for HA but when I issue the failover command in the secondary I get
Mate detected then I get this error
HA failure due to Mate not present card in slot 3 is different from mine sfr5525
i noticed I had firepower 5.4 on the new 5525 but in the existing one I had no software installed on it. I removed the software on the new 5525 in hopes thus would work but it did not. I did not issue a reload or reboot though. Could this be the problem?
05-19-2017 08:43 PM
If ne has a sfr (FirePOWER) module then the other must as well for HA to form successfully.
If your ASA software is 9.3(1) or later, you can overide that setting with the command:
no monitor-interface service-module
Reference:
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-firewalls/200944-Disable-Service-Module-Monitoring-on-ASA.html
05-19-2017 09:08 PM
Thank you for your reply. I'll give that command a go to see if HA comes up and I'll make sure that software matches for sfr on both FWs even though they are not in use.
08-13-2018 12:37 PM
I have a similar problem, and the way to reach to a solution was with this comands:
sw-modulo module cxsc uninstall
sw-module module sfr uninstall
regards
01-21-2019 12:43 AM
For the record, I had the error:
Detected an Active mate
Mate CXSC5525 card in slot 3 is different from mine SFR5525
I issued:
no monitor-interface service-module
sw-module module sfr uninstall
But didnt work untill AFTER a reboot !
01-31-2019 06:56 PM
This worked for me after a reboot.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide