ASA HA cluster-- How to set interface on only 1 of the cluster?

[jmaxwellUSAF]

Hi.

Within a HA cluster of two ASA 5525s, when I enter either device, they copy the config to each-other to represent 1 device.  I need to label g0/4 interface as 192.168.0.1 on ASA1, and the other g0/4 as 192.168.0.2 on ASA2. How do I do this? (I assume I need to access the individual OS, not the virtual singular device.)

[Rob Ingram · Accepted solution]

@jmaxwellUSAF unfortunately I don't think that is possible, as the configuration on the control unit is replicated to all other members.

[Marvin Rhoads]

Are you asking about a cluster or an HA pair? For an HA pair, we can set the ip address of an interface on the standby unit using the "standby" keyword at the end of the IP address line in the cli when in interface configuration mode.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa-cli-reference/I-R/asa-command-ref-I-R/int-ipu-commands.html#wp1453532950

In ASDM, this is set under the Device Management, High Availability section.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa919/asdm719/general/asdm-719-general-config/ha-failover.html#task_A121C1FAB9264BBD889968DEE31E5773