Running Commands on a Standby ASA from the Active
I was exploring commands on the ASA a while back and discovered that you can run commands on the standby unit from the active. It’s a bit weird, though, since you actually run the commands from config mode.
As an example, if you want to do a show interface OUTSIDE on the standby unit to see what the status is, you would do this.
firewall(config)#failover exec standby show interface OUTSIDE Interface Ethernet0/0 "OUTSIDE", is up, line protocol is up Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec <SNIP>
Pretty handy when you want to know information about the other firewall without having to log into that sucker (and getting confused by the same prompts and reloading the wrong mate).
Send any misplaced commands questions my way.
Aaron does lots of stuff and, therefore, does nothing well. He's trying, though.
https://masto.ai/@aconaway
https://masto.ai/@aconaway
Latest posts by jac (see all)
- Generating Network Diagrams from Netbox with Pynetbox - August 23, 2023
- Out-of-band Management – Useful Beyond Catastrophe - July 13, 2023
- Overlay Management - July 12, 2023
Personally, I always set "prompt hostname state", not always necessary when using connection managers like securecrt but is very comforting when wanting to reboot secondaries or working via console.
Can even go as far as “prompt hostname priority state” but really when you are working in a HA pair the primary is only a name.
Its even better than that, you can use it to send commands the other way (from standby to active). Predictably the syntax for this is "failover exec active …". This has come in handy on the couple of occasions that one of our primary units has stopped accepting management traffic for whatever reason.
[…] commented on an article I wrote last November and mentioned the prompt command in the ASA. I never set aside any time to research it, but I […]
That was great help!! I was looking for hours how to get the macs from the failover device. Your post was the only ONE answearing to this.
Thanks again