About robertson.michael

robertson.michael · 03-26-2009

Hi everyone,I am looking for some clarification on the behavior of an ASA Active/Standby failover pair when the units contain AIP modules. My experience with SSMs is mostly with the CSC module.The documentation states that if the AIP module in the Ac...

robertson.michael · 09-11-2009

You are correct--I pretty much don't have a use for the enable password once things are configured this way.I don't actually work for RIT, I'm just a grad student there. It is a great school though.Take care,-Mike

robertson.michael · 09-11-2009

Hi Jimmy,You'll also need to add:aaa authentication enable console LOCALMy apologies for not including that before--shouldn't have assumed you had that already.-Mike

robertson.michael · 09-10-2009

Hi Jimmy,Depending on your AAA config, you can make this happen without changing/revealing your enable password. For example, with SSH you can configure:ASA(config)# username Doe password John priv 15ASA(config)# aaa authentication ssh console LOCAL ...

robertson.michael · 08-26-2009

Hi Imran,Unfortunately, this is not possible. The ASA only allows you to ping the interface to which you are attached. You cannot ping an interface across the firewall--this is by design.Hope that helps.-Mike

robertson.michael · 08-25-2009

Hi Rob,To answer your question, no, this is not normal--you should be able to access your standby FWSM via management protocols like SSH and SNMP.If you can access the Active unit just fine and you're able to ping the Standby unit, it sounds like you...

Member Since	‎07-21-2008 05:40 PM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	238
Total Helpful Votes Received	211

User Statistics

User Activity

Active/Standby failover behavior with AIP-SSM

Re: Resetting the EXEC passwords on an ASA

Re: Resetting the EXEC passwords on an ASA

Re: Resetting the EXEC passwords on an ASA

Re: Internal ASA IP not pingable

Re: FWSM management problem?