Replace Failed Primary ASA 5520 in Cluster

[gblumberg2]

does anyone have experience with replacing a failed Primary ASA 5520 within a cluster? I have a situation where our primary is dead and the standby is now the active member of the cluster. I have a replacement 5520 on the way from Cisco, but wanted to know if anyone out there had encountered this situation and what steps need to be followed to get the right config on the new unit and inserted back into the cluster?

thanks

 

[xyCruiseryx]

Hi,

i think the easiest way would be to include the new asa in the cluster with only cluster configuration and interface ips. Then save the master cluster (backup will be save the config too).

 

[gblumberg2]

hi all, i figured this out on my own and thought i would post the steps i took in doing this in the hopes that someone down the road will find this information useful.

First i configured the standby (which was active) 5520 as the primary. Do a sho failover interface to see that your standby (now primary) asa has taken over the primary IP address. This step is just to confirm that the standby is now the primary.

Then on the replacement asa i received from cisco this is what i configured.


Failover

Failover lan unit secondary

failover lan interface failover GigabitEthernet0/3

Failover lan enable

failover interface ip failover 172.16.x.x 255.255.255.x standby 172.16.x.x

Placed the new standby asa in the rack, powered it up and

then did a write standby from the primary and that should update the configuration on the new (standby) unit.

I hope this helps someone out there in the future.