Timeline for Cisco ASA failover monitor-interface policy
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 12, 2019 at 19:37 | vote | accept | Satish | ||
| Jul 12, 2019 at 15:14 | comment | added | Jesse P. | @Satish If I've answered your questions, please mark my answer accordingly, so this question does not continue to come up as unanswered. | |
| Jul 12, 2019 at 3:46 | comment | added | Jesse P. | @Satish Correct. On the interfaces where you've got the IP addresses configured at the base/parent level, interface monitoring keeps tabs of layer-1 and layer-2. With sub-interfaces, interface monitoring only happens on the parent interface by default (layer-1, unless you also have an IP address configured on it as well as the sub-interfaces, in which case it would still be layer-2 as well, but I digress), so you would need to enable monitoring on the sub-interfaces to be able to keep tabs on layer-2 again since those are where your IP addresses for each of the failover cluster members. | |
| Jul 12, 2019 at 3:37 | comment | added | Satish | In that case it will only tigger if any L2 connectivity issue like missing VLAN in trunk etc, just trying to understand if we monitor physical then what is the point to monitor sub-interface, in which condition it will be useful to have sub-interface monitor ? | |
| Jul 12, 2019 at 3:25 | comment | added | Jesse P. | No. Shutting down an interface would shut down the interface on both units (because they would sync), so they'd still be identical and neither unit would be in a better failover state than the other, so no failover would be triggered. | |
| Jul 12, 2019 at 3:10 | comment | added | Satish |
Let's say if i shutdown one of sub-interface (which is monitored) in that case does it going to trigger failover ?
|
|
| Jul 12, 2019 at 3:01 | history | answered | Jesse P. | CC BY-SA 4.0 |