I was exploring commands on the ASA a while back and discovered that you can run commands on the standby unit from the active. It’s a bit weird, though, since you actually run the commands from config mode.
As an example, if you want to do a show interface OUTSIDE on the standby unit to see what the status is, you would do this.
Pretty handy when you want to know information about the other firewall without having to log into that sucker (and getting confused by the same prompts and reloading the wrong mate).
Send any misplaced commands questions my way.
Aaron Conaway
I shake my head around sometimes and see what falls out. That's what lands on these pages. If you have any questions, the best way to contact me is through Twitter at @aconaway.
Follow Me:
Personally, I always set "prompt hostname state", not always necessary when using connection managers like securecrt but is very comforting when wanting to reboot secondaries or working via console.
Can even go as far as “prompt hostname priority state” but really when you are working in a HA pair the primary is only a name.
Its even better than that, you can use it to send commands the other way (from standby to active). Predictably the syntax for this is "failover exec active …". This has come in handy on the couple of occasions that one of our primary units has stopped accepting management traffic for whatever reason.
That was great help!! I was looking for hours how to get the macs from the failover device. Your post was the only ONE answearing to this.
Thanks again