Now you’re done, check you Active/Standby status again, this should be the same as the first show failover command in this post. If your maintenance is finished, you should enable the failover mechanism again on the Standby node: firewall/stbyNoFailover(config)# failoverīeginning configuration replication from mate. We’re back on the Active unit and you can see the Secondary in Disabled where it was previously Standby Ready: firewall/act# show failover You can see on the output it adds NoFailover to the CLI prompt. By disabling failover, this unit will remain in standby state. what am I missing here What will happen when it expires Does it just convert to the base license permanently Thanks 4. I was thinking that the base license is a permanent license. Like the smallest ASA 5505 model, the 5510 comes with two license options: The Base license and the Security Plus license. So I have an ASA 5510 that is saying it has a base license, but it says it is a time based license that expires in a few days. INFO: This unit is currently in standby state. The 5510 ASA device is the second model in the ASA series (ASA 5505, 5510, 5520 etc) and is fairly popular since it is intended for small to medium enterprises. Now login to the Standby firewall and disable failover very easily via the no failover command in configuration mode: If is very useful to temporary disable the Failover mechanism so the Standby firewall stays Standby and you don’t end up in a situation where you have two Active firewalls.īelow is an example output of the show failover output of an ASA 5520: (only relevant information is shown in this output) firewall/act# show failoverįailover LAN Interface: failover GigabitEthernet0/1 (up) Add this to any CCNA lab kit and turn it into a CCNA Security Lab Kit and even be a primer for CCNP Security The ASA 5510 can take. If you have a planned maintenance and you know you will hit your Failover LAN between two ASA’s in an Active/Standby configuration.

Cisco 5510 asa