Solved

ASA 5505 Restore to Duplicate Unit.

Posted on 2013-06-13
1
667 Views
Last Modified: 2013-06-13
I have a Cisco ASA 5505 with Security Plus license configured for WAN, LAN and DMZ, which has been working great for several years. I just purchased a new ASA 5505 with SP on Ebay (Yes, I know I probably should have purchased it through a Cisco partner) as strictly a backup unit to swap out if the original dies or if I need to bring it down for upgrades or repairs. However I cannot get the backup to work.

This is what I have done in an attempt to duplicate the new ASA 5505 device as a backup:

Using the console, I saved the running config from my working 5505 to my tftp server, and then copied the running config from my tftp server to my new 5505 as startup config. After issuing the reload command, the unit booted up properly with a running config identical to my working 5505. However if I swap out the devices, I cannot get to the WAN or DMZ through the backup device.

Both units are running ASA 8.2(1) with ASDM 6.2(1).  The units are identical except for the fact that the working unit has 1GB of RAM and the backup has 256MB. I printed out the running config from both units and compared them line by line, and they are also identical except the backup unit has 1 added line: anyconnect-essentials.

I am not an ASA expert by any means, and am wondering if I missed something, or should it work based on the steps I took?

Steve
0
Comment
Question by:CALAOMS
1 Comment
 

Accepted Solution

by:
CALAOMS earned 0 total points
ID: 39246598
Turns out it was the ARP table in the modem/router. After rebooting the modem, everything works as it should.  I have to give jcarvaja over at the Cisco firwall forum credit for this fix as he pointed me in this direction.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
I recently updated from an old PIX platform to the new ASA platform.  While upgrading, I was tremendously confused about how the VPN and AnyConnect licensing works.  It turns out that the ASA has 3 different VPN licensing schemes. "site-to-site" …
This tutorial demonstrates a quick way of adding group price to multiple Magento products.
This is a video that shows how the OnPage alerts system integrates into ConnectWise, how a trigger is set, how a page is sent via the trigger, and how the SENT, DELIVERED, READ & REPLIED receipts get entered into the internal tab of the ConnectWise …

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now