3

Active ASA and standby ASA communicates through failover link. If active ASA detects its interface to switch is down, then it tells the standby ASA and the standby ASA becomes active.

How does the switch connected to both ASAs know to divert traffic to standby ASA which becomes active after the interface to the original active ASA is down? Any required configuration on the switch?

Improve this question

1 Answer 1

Reset to default
3

Switches only forward frames based MAC address. The secondary ASA takes over the MAC address of the failed ASA.

Cisco has an explanation of the process.

Improve this answer
2
  • So, while the standby ASA is in standby, let's say I ping the active ASA's IP address from a computer X connected to the switch. So, the switch will broadcast the ARP to all interfaces except the interface to X. Only active ASA reply the ARP?
    – Ron Vince
    Oct 14, 2015 at 14:08
  • 1
    That is correct. Only the active ASA responds to the active IP address with the active MAC address. When a failover occurs, the standby ASA becomes the active ASA and responds.
    – Ron Maupin ♦
    Oct 14, 2015 at 14:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.