Setting UP a SECOND ASA5506-x firewall

[Myleslandish]

Hello, I successfully set up/configured my first ASA device. I just purchased as second 5506 and am wondering about how compatible or incompatible the bkup configuration files I’ve saved from the first device are gonna be with the second ASA. It mentioned something about a master passphrase when making the bkup. It just started to say this and I’m sure it’s bc I changed a setting on the device and I’m just trying to figure out how to get it bk to a standard one without the master pass phrase being necessary to use it on a secondary device. 

[Georg Pauwen]

Hello,

the master passphrase has nothing to do with the content of the backup file, it acts as a key to decrypt the backup file when it needs to be restored. I assume you used the command ' write memory encrypt' when you made the backup ?

[Myleslandish]

At few weeks into it I got into a part with keys being given and or generated. So I just assumed it had something to do with that. Idk if I tried to reset bk to a config before I ever did those changes. 

[Myleslandish]

I didn’t 

[MHM Cisco World]

Both same platform and same ver.

If yes then backup config to tftp and then download it for second asa.

MHM

[Myleslandish]

Same device 5506-x with firepower. But I don’t believe it goes beyond that in similarities. I just wish I could copy the first one to the second

[Aref Alsouqi]

The master passphrase is used to encrypt the plain text passwords with a specific key you configure on the ASA. Did you try to use the command "show system:running-config" and see if you can see the password in an unencrypted format? also, why not to add this new firewall as a secondary device and form an HA pair?

[Myleslandish]

I haven’t been able to use cl

[Aref Alsouqi]

Sorry if I missed this, but why you were not able to get access into CLI?

Check out this link please about how to configure high availability on the ASA firewalls:

Cisco ASA Active/Passive Failover Configuration Example (packetswitch.co.uk)

[Myleslandish]

I’ve noticed it seems to have a cl to use on the ASDM; and I’ve used a few from the selections but i haven’t been able to connect to it with the console or whatever. Would any and all commands work on the ASDM same as the standard cl?

[Aref Alsouqi]

Yes, "ASDM > Tools > Command Line Interface" should give you the same output as if you are connected to the firewall CLI.

[Myleslandish]

Good to hear; thanku

[Myleslandish]

I have looked at the files in text format and that was how I was able to activate an identity certificate and something else

[Myleslandish]

HA pair is what? For real, I’m low on this totem ppl