As there is no option for preempt in ASA active/standby configuration, does anyone have a suggestion for a workaround to confirm that primary ASA will always be active when it is up?

  • Is there a reason you intend for one of the ASAs to be "preemptively" Active?
    – Eddie
    Dec 18 '15 at 18:03
  • Yes , i have subscreption locense for WSE on the primary ASA only
    – Mr.lock
    Dec 18 '15 at 18:09
  • What code version are you running? The licenses are shared after 8.3. Even if your primary explodes, the secondary will retain the 'shared' license for 30 days, giving you enough time to get a licensed replacement from Cisco.
    – Eddie
    Dec 18 '15 at 21:44
  • I am running version 9.5 Very good , i will try that
    – Mr.lock
    Dec 18 '15 at 22:10
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide your own answer and accept it.
    – Ron Maupin
    Aug 7 '17 at 16:37

According to Cisco, there are three ways for the formerly Active, now Standby, primary unit to again become Active:

  1. Active unit failed (power or hardware)
  2. Failover link failed at startup
  3. Interface failure on active unit above threshold

You may be able to do something with an EEM script to fail an interface on the now Active secondary unit when the now Standby primary unit comes back up, and then restore the failed interface after the unit returns to Standby. This is a real kludge because this is not the design for Active/Standby.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.