Cisco ASA

From Dave-Wiki
Revision as of 02:45, 12 February 2024 by Dave (talk | contribs) (→‎Move Context)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

HA/Redundancy

Manual Failover

Manually failover a group to the peer firewall:

  1. admin# changeto system
  2. show failover
  3. failover active group 2 (this makes the currently-logged-in firewall active for group 2)

Move Context

Move context from group 2 to group 1:

Note: All groups must be on same firewall before you can move a context to another group.

  1. admin# changeto system
  2. # failover active group 2 (this fails group 2 traffic over to this firewall)
  3. # conf t
  4. (config)# context fw02
  5. (config-ctx)# join-failover-group 1
  6. (config-ctx)# end
  7. # wr mem
  8. # no failover active group 2 (this fails group 2 contexts back to other firewall)

VPN

Debug

Debug Specific Peer

# debug crypto condition peer 1.1.1.1

# debug crypto ikev2 protocol 127

Stop All Debugs

# undebug all