• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 709
  • Last Modified:

CISCO ASA Standby IP Address

Dear Team,

What is the purpose of Standby IP address on the interfaces in CISCO ASA (failover mode A-P) other than exchanging HB.

Regards,
LAJAN JALEEL
0
Lajan Jaleel
Asked:
Lajan Jaleel
1 Solution
 
ffleismaCommented:
one thing i can think of, is for access to standby firewall directly. in case you'll need to check sync file, status, ver, config, serial, etc.

other than that, standby unit takes over primary IP during failover anyway

hope this helps, or if other experts can add. not sure if ASA does keepalive or monitoring of peer using standby IP or failover link.
0
 
max_the_kingCommented:
Hi,

Without a standby IP address,  in case of a failover, the ASA will not clear its routing table. It needs an IP address on the interface to clear it.

Without a standby IP address, the ASA will leave the duplicate routes in place when the unit becomes active until they are cleared manually.
hope this helps
max
0

Featured Post

IT Degree with Certifications Included

Aspire to become a network administrator, network security analyst, or computer and information systems manager? Make the most of your experience as an IT professional by earning your B.S. in Network Operations and Security.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now