Running Commands on a Standby ASA from the Active
I was exploring commands on the ASA a while back and discovered that you can run commands on the standby unit from the active. It’s a bit weird, though, since you actually run the commands from config mode.
As an example, if you want to do a show interface OUTSIDE on the standby unit to see what the status is, you would do this.
firewall(config)#failover exec standby show interface OUTSIDE Interface Ethernet0/0 "OUTSIDE", is up, line protocol is up Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec <SNIP>
Pretty handy when you want to know information about the other firewall without having to log into that sucker (and getting confused by the same prompts and reloading the wrong mate).
Send any misplaced commands questions my way.
Aaron does lots of stuff and, therefore, does nothing well. He's trying, though.
https://masto.ai/@aconaway
https://masto.ai/@aconaway
Latest posts by jac (see all)
- Netbox Upgrade Play-by-play - April 25, 2023
- Sending Slack Messages with Python - March 15, 2023
- Using Python Logging to Figure Out What You Did Wrong - February 26, 2023
Personally, I always set "prompt hostname state", not always necessary when using connection managers like securecrt but is very comforting when wanting to reboot secondaries or working via console.
Can even go as far as “prompt hostname priority state” but really when you are working in a HA pair the primary is only a name.
Its even better than that, you can use it to send commands the other way (from standby to active). Predictably the syntax for this is "failover exec active …". This has come in handy on the couple of occasions that one of our primary units has stopped accepting management traffic for whatever reason.
[…] commented on an article I wrote last November and mentioned the prompt command in the ASA. I never set aside any time to research it, but I […]
That was great help!! I was looking for hours how to get the macs from the failover device. Your post was the only ONE answearing to this.
Thanks again