IP Address of Slave Unit in ASA Cluster

[fouzan.work]

I have a pair of ASA 5585s that I've configured in a cluster.

FWL1# sho cluster info

Cluster HQASA: On

    Interface mode: spanned

    This is "FWL1" in state MASTER

        ID        : 0

        Version   : 9.0(2)

        Serial No.: <removed>

        CCL IP    : <removed>.1

        CCL MAC   : 44d3.ca34.fae2

        Last join : 09:05:02 UTC May 10 2013

        Last leave: N/A

Other members in the cluster:

    Unit "FWL2" in state SLAVE

        ID        : 1

        Version   : 9.0(2)

        Serial No.: <removed>

        CCL IP    : <removed>.2

        CCL MAC   : 30e4.db19.6636

        Last join : 09:13:35 UTC May 10 2013

        Last leave: N/A

The problem is that when I SSH into the slave unit's IP address, it logs me into the master unit. (SSHing to master unit's IP address also logs me into the master unit, as expected.) Show version shows the serial number of the master unit (when connecting to slave unit's IP address).

The management addresses are created using the recommended method of creating a pool:

ip local pool mgmtpool 172.16.1.202-172.16.1.209

!

interface Management0/0

management-only

nameif mgmt

security-level 100

ip address 172.16.1.201 255.255.255.0 cluster-pool mgmtpool

!

Has anyone seen this? How do I connect to the slave unit(s)?

[subriyer · Accepted solution]

Hello,

The cluster Master will hold the system IP and one IP from the pool. In your case system IP is 172.16.1.201 & Master would have been assigned 172.16.1.202.

To SSH to Slave unit of cluster, you need to use IP address 172.16.1.203.

You can check the same by issuing "cluster exec show ip".

Thanks

Iyer

[Ramakrishnan V]

How could i get IP address of Slave unit when inside as managment