Multiple Context ASA failover (Active/Standby) with a new purchase ASA

[nitiwit.wa1]

Hello,

Now my customer uses 1 ASA with a multiple context mode (around 3 contexts, admin and 2 created by customers) and they purchased new ASA5545 for failover (Active/Standby)

My question is can I configure failover (Active/Standby) between active ASA and new purchased one that doesn't have any configuration? (The new one will be standby)

Do I need to change mode of new ASA to multiple context first? and create context equal to active ASA? Will a standby ASA replicate entire configuration from active ASA? 

Is there any configuration example cause I couldn't find it.

Thanks for your support !

[johnlloyd_13 · Accepted solution]

hi,

you just need a minimum config on the new/secondary ASA 5545-X.

the config will be replicated from the primary FW afterwards.

note the default ASA security context is 2, so you have 1x 'admin' context by default and 2 customer contexts.

1) upgrade secondary FW to the same ASA and ASDM image

2) enable 'multiple mode'

3) unshut the 'failover' interface

4) configure the failover config.

see config sample below:

configure terminal
mode multiple        <<< ASA WILL BE REBOOTED

---

configure terminal
interface GigabitEthernet0/7
 no shutdown
failover lan unit secondary
failover key cisco123
failover lan interface FAILOVER GigabitEthernet0/7
failover interface ip FAILOVER 10.1.1.1 255.255.255.252 standby 10.1.1.2
failover