Solved

Cisco ASA 5510 Active/Standby Configuration

Posted on 2014-04-01
3
684 Views
Last Modified: 2014-04-09
I have configured many Cisco ASA Active/Standby pairs in the past, but I am having problems on the latest one.  I configured two ASA5510's in Active Standby, I did a "no failover active" on the Active ASA to make the secondary ASA Active.  I did this just to test functionality.  When the secondary ASA is active, we notice problems.  Pings to to the internet randomly drop, site to site VPNs drop some pings over the tunnel, and the users can notice it.  If I make the primary ASA active again, things are perfect.  No ping drops to the internet or over VPN's.  I'm not sure what could be causing, any ideas?
0
Comment
Question by:denver218
3 Comments
 
LVL 28

Accepted Solution

by:
asavener earned 500 total points
ID: 39969113
First thing I'd check is cabling, and then duplex/port settings on all of the interfaces.
0
 
LVL 6

Expert Comment

by:gcl_hk
ID: 39971110
It should be not a dual WAN scenario, right?

"show failover state"

To check for the configuration sync status on both active and standby node.

"show failover"

To check for the overall failover status

Draft a physical connection diagram for us to understand your topology.

"debug fover" may require for further troubleshooting
0
 
LVL 4

Author Closing Comment

by:denver218
ID: 39989762
It ended up being a bad cable.  I replaced the cable, failed it over about 10 times and had no problems.  Thanks.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
C3650 Web interface login not working 2 15
Opening Ports 18 27
How to use a IP block on cisco 877 3 28
Firewall port opening 2 26
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now