is standby ip address required to monitor interface?

[July sall]

hi we have failover setup and enabled on 2x5510 (version9) devices via mgmt0/0, everything is working fine

we have ip address for inside/ouside/DMZ on active ASA

however, no standby ip address configed,

just like to ask to enable interface monitoring ,

1. do you need the standby ip address configed?

2. if no standby ip address configed, does the standbyASA will automatically use primary IP address do forwarding when 1 primary interface down?

thanks

[Karsten Iwen · Accepted solution]

Yes, the standby ASA will take over the IP address configured on the active unit. But without standby addresses configured you won't detect all failures. If in your setup every failure results in a link-down on one of the ASAs, then it still should work. But of course it's not the best way to implement it without standby addresses.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni