Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi everyone,I am looking for some clarification on the behavior of an ASA Active/Standby failover pair when the units contain AIP modules. My experience with SSMs is mostly with the CSC module.The documentation states that if the AIP module in the Ac...
You are correct--I pretty much don't have a use for the enable password once things are configured this way.I don't actually work for RIT, I'm just a grad student there. It is a great school though.Take care,-Mike
Hi Jimmy,You'll also need to add:aaa authentication enable console LOCALMy apologies for not including that before--shouldn't have assumed you had that already.-Mike
Hi Jimmy,Depending on your AAA config, you can make this happen without changing/revealing your enable password. For example, with SSH you can configure:ASA(config)# username Doe password John priv 15ASA(config)# aaa authentication ssh console LOCAL ...
Hi Imran,Unfortunately, this is not possible. The ASA only allows you to ping the interface to which you are attached. You cannot ping an interface across the firewall--this is by design.Hope that helps.-Mike
Hi Rob,To answer your question, no, this is not normal--you should be able to access your standby FWSM via management protocols like SSH and SNMP.If you can access the Active unit just fine and you're able to ping the Standby unit, it sounds like you...
