Force failover a Cisco ASA

Posted by user974896 on Server Fault See other posts from Server Fault or by user974896
Published on 2012-11-20T20:33:24Z Indexed on 2012/11/21 11:06 UTC
Read the original article Hit count: 315

I have two ASA in a lan state primary\secondary configuration. None of them have "failover active" or "no failover active" in their configuration. Would it be proper to failover in a manner such as:

Log into console of primary unit and issue "failover lan state secondary", log into the console of the original secondary unit and issue "failover lan state primary". To fail back simply reverse the process

or

Log into the console of the primary unit and issue "no failover active", log into the console of the original secondary unit and issue "failover active". To fail back issue "failover active" on the original primary (now secondary) unit, and "no failover active" on the now primary unit.

I do not like the second method because it adds configuration directives that were not in place before. Will the first method work?

© Server Fault or respective owner

Related posts about networking

Related posts about firewall