We have two cisco asa 5510's in a failover setup.
I'd like to take the secondary/failover and make it the primary/active and do this for good..not just for testing. And of course make the other the new secondary/failover.
What would be the best way of doing this? What config do I need to change?
To sum it up, Id like to swap the units from primary to secondary and vice versa.
Just issue the command "no failover active" on the primary ASA. The secondary unit will now be the primary/active unit and will remain that way until another failover situation occurs.
Please remember to select a correct answer and rate helpful posts
Primary will be always primary and secondary will be always secondary.., only you can change the Active and standby mode. after putting "failover active" on standby unit, it will become Secondary/Active and other will be primary/Standby.
Is you want to change the role and not just the state, you will need to make the failover unit Secondary-Active as others have described. Then take the Primary-Standby offline. Modify the Secondary-Active configuration to designate it as Primary and the (offline) Primary unit to make it Secondary. Then bring the former Primary (newly designated Secondary) back online.
The bigger question is why go the the trouble? The designation is purely cosmetic in 99% of the use cases.
Propagation of configuration changes is always from Active to Standby.
Whether a unit is Primary or Secondary has nothing to do with that bit - it's strictly a convention to distinguish one appliance from the other.
I have a similar scenario. The Secondary is Active. The Primary is offline and out of sync with the Secondary. I want to make change my Secondary to Primary, wipe my old Primary and make it Secondary. The process appears easy.
My question is when I change my current Secondary/Active to Primary/Active via:
failover lan unit primary
will this cause any downtime?