Replacing standby failover ASA

[Colin Higgins]

I have two ASA firewalls in an active-passive standby arrangement. The secondary unit had a hardware failure and needs to be replaced.

When I configure the replacement, do I need to put the ENTIRE running configuration on it and set it to "failover lan unit secondary"?

Or do I simply need to configure the failover ink, set the system to "failover lan unit secondary" and cable it up? (with the idea that the primary then syncs the config to the standby)

[Rahul Govindan · Accepted solution]

Since it is the secondary unit, it should pick up all the configuration from the primary (currently active) unit. So just the failover configuration and any files that need to be uploaded on to the flash (anyconnect, hostscan images etc.)

[Rob Ingram]

Hi,
You at least need to configure the interfaces, enable failover and define "failover lan unit secondary". The configuration will then sync from the Active ASA.

HTH