Cisco ASA HA Setup in ACTIVE - ACTIVE State

I have two ASA 5540s, with 8.4.(2).8 installed in a HA setup , they lost synchronisation last week, and now are both in ACTIVE mode.
I have a PRIMARY/ACTIVE and a SECONDARY/ACTIVE.
Is there any procedure to get back to PRIMARY/ACTIVE and SECONDARY/STANDBY available, is it just rebooting the PRIMARY, and the PRECEDENCE command on it starts the process.
Checked Layer 2 / 3 CONNECTION between both devices on the FAILOVER cable, and it is working.

Thanks for the reply Lads,
      Each FW is connected to individual switches, that are connected to each other by fibre link. Checked the Layer2 connections, and you can see the MACs on both devices from both switches ..
       The failed Firewall I put into NO FAILOVER, and can ping either side of the FAILOVER / HEARTBEAT link from the other firewall.
      Rebooted the FW with all Interfaces in SHUTDOWN, to check errors on bootup, any issues with failed Firewall, seem to come up correctly
      So at the moment, I have a SECONDARY firewall in ACTIVE , and PRIMARY in NO FAILOVER, with interfaces in SHUTDOWN.
        Need to bring PRIMARY live again, and system back to PRI / ACTIVE and SECONDARY / STANDBY

Similar Messages

Cisco asa security context active/active failover

Hi,
I have two Cisco ASA 5515-X appliance running OS version 8.6. I want to configure these two appliance in multiple context mode mode.
Each ASA appliance will have two security context named "ctx1" & "ctx2".
I have to configure failover on these two ASA appliance such that "ctx1" will be active in one ASA box and "ctx2" will be active and process the traffic on second box to achieve this i will configure two failover group 1 & 2. And assign "ctx1" interfaces in failover group 1 and "ctx2" interface to group 2.
I am a reading a book on failover configuration in active/active in that below note is mentioned.
If an interface is used as the shared interface between multiple contexts, then all of those contexts need to be in the same failover redundancy group.
What this means? can someone please explain because i also want to use a shared interface which will be used by "ctx1" & "ctx2". In this case shared interface can be used in failover group 1 & 2 ?
Regards,
Nick

Yout will have to contact [email protected] or open a TAC case in order to have a new activation key generated. They can do that once they confirm your eligibility.

Single AIP-SSM in Cisco ASA Failover Active / Standby Mode

Hi,
I can add single AIP-SSM on Cisco ASA in failover active / standby mode?

No, both units need the same hardware, that includes the installed modules.
Sent from Cisco Technical Support iPad App

Cisco ASA 5505 Reset-I Problem with TCP State Bypass

Hello,
I have a Cisco ASA 5505 that functions as my primary firewall and a Mitel 5000 controller behind it. I have two external phone users that have been connecting through the firewall with no issues for six months until about two weeks ago. I am now seeing the following log entry on the phone trying to connect to the Mitel Controller.
6
May 16 2014
14:52:52
302014
72.135.115.37
6915
192.168.20.2
6801
Teardown TCP connection 1203584 for outside:72.135.115.37/6915 to inside:192.168.20.2/6801 duration 0:00:00 bytes 0 TCP Reset-I
My phones are designed to work with the Mitel 5000 and Mitel 3300 phone controllers. The 5000 will only use port 6800 for call control, while the 3300 will use 6801 (Secured Minet), 6802 (Minet SSH), and if those fail, port 6800 (Minet Unsecured). When the phones initiate a connection, they try 6801 first. If 6801 is unavailable, the phone controller adds the RST flag to the ACK packet. When the phone sees the RST flag, it is supposed to reset and use the next port (6802). The same process happens again for port 6802, then the phone knows to try 6800. The problem is that the ASA sees the RST flag now and terminates the connection at the firewall. Therefore, the phones never see the RST flag, and continue to try the connection with port 6801.
I have tried to use the TCP State Bypass feature to correct the situation, but the log shows that the connection is still being terminated immediately by the firewall. I am a novice when it comes to configuring the ASA. Any help would be greatly appreciated, as the company that I bought the phone system from is out of troubleshooting options. I do not think that I have made any changes to the firewall around this time. I have packet captures and logs from my ASA and I have wireshark data on the inside of my network. I need to figure out how to configure the ASA so that it ignores the RST flag and sends the packet back to the source.
Any help would be greatly appreciated!

Thanks Rizwan,
Still no luck. I can't even ping the otherside (office).. I am not sure if i'm running the debug rightway. Here are my results...
homeasa(config)# ping inside 10.10.5.254............. (Office CIsco ASA5505 IP on local side. I also tried pinging the server on other side (office) whic is @10.10.5.10 and got the same result)
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.5.254, timeout is 2 seconds:
Success rate is 0
homeasa(config)# debug crypto isakmp 7
homeasa(config)# debug crypto ipsec 7
homeasa(config)# sho crypto isakmp 7
^
ERROR: % Invalid input detected at '^' marker.
homeasa(config)# sho crypto isakmp
There are no isakmp sas
Global IKE Statistics
Active Tunnels: 0
Previous Tunnels: 0
In Octets: 0
In Packets: 0
In Drop Packets: 0
In Notifys: 0
In P2 Exchanges: 0
In P2 Exchange Invalids: 0
In P2 Exchange Rejects: 0
In P2 Sa Delete Requests: 0
Out Octets: 0
Out Packets: 0
Out Drop Packets: 0
Out Notifys: 0
Out P2 Exchanges: 0
Out P2 Exchange Invalids: 0
Out P2 Exchange Rejects: 0
Out P2 Sa Delete Requests: 0
Initiator Tunnels: 0
Initiator Fails: 0
Responder Fails: 0
System Capacity Fails: 0
Auth Fails: 0
Decrypt Fails: 0
Hash Valid Fails: 0
No Sa Fails: 0
Global IPSec over TCP Statistics
Embryonic connections: 0
Active connections: 0
Previous connections: 0
Inbound packets: 0
Inbound dropped packets: 0
Outbound packets: 0
Outbound dropped packets: 0
RST packets: 0
Recevied ACK heart-beat packets: 0
Bad headers: 0
Bad trailers: 0
Timer failures: 0
Checksum errors: 0
Internal errors: 0
hjnavasa(config)# sh crypto ipsec sa peer 96.xxx.xxx.118
There are no ipsec sas
homeasa(config)#

A top level menu item should display its active state if any of its submenu items are active

Example case: I'm designing a Muse site which is basically a portfolio of our work. We design books, doing page layout and covers. We have numerous book categories and sub categories which I put in a horizontal menu. When a given top level category menu item doesn't have a submenu, it is a hyperlink and it displays active state when the browser displays its linked page. But when a given page is displayed from a submenu link, its top level menu item does NOT display active state. I think it should.
For example, we have a "Nostalgia" category which has "Film" and "TV" subcategories. Because the menu item, "Nostalgia" has a submenu containing "Film" and "TV", the label "Nostalgia" is not a hyperlink. The submenu attached to it has the two hyperlinked items "Film" and "TV". When the browser is displaying either linked page, the submenu is hidden. So it would be nice if the top level item, "Nostalgia" would display in an active state.

Hello Daniel,
As of now this feature is not there in Adobe Muse.
I would suggest you to please log this as a feature request in our "Ideas for features in Adobe Muse" section. (http://forums.adobe.com/community/muse/ideas)
Hope this helps.
Regards,
Sachin

Application is in 'Prepared' state instead of 'Active' state.

I m using below code to deploy an application on weblogic 11g
import java.io.*;
import java.util.Hashtable;
import weblogic.deploy.api.tools.*; //SesionHelper
import weblogic.deploy.api.spi .*; //WebLogicDeploymentManager
import javax.enterprise.deploy.spi.TargetModuleID;
import javax.enterprise.deploy.spi.status.ProgressObject;
import javax.enterprise.deploy.spi.status.DeploymentStatus;
import javax.enterprise.deploy.shared.ModuleType;
import javax.enterprise.deploy.spi.Target;
import javax.management.MBeanServerConnection;
import javax.management.remote.JMXConnector;
import javax.management.remote.JMXConnectorFactory;
import javax.management.remote.JMXServiceURL;
import javax.naming.Context;
public class WeblogicTest
     public static void main(String ar[]) throws Exception
          System.out.println("Start Deploying");
          WebLogicDeploymentManager deployManager=SessionHelper.getRemoteDeploymentManager( "t3", "10.0.0.47", "7003", "weblogic",
          "weblogic123");
          System.out.println("Deploy Manager : " + deployManager);
          DeploymentOptions options = new DeploymentOptions();
          options.setName("TC33");          //TODO
          Target targets[] = deployManager.getTargets();
          System.out.println("Target : " + targets);
          Target deployTargets[]=new Target[1];
          int temp=0;
          for (temp=0; temp < targets.length; temp++){
               if(targets[temp].getName().equals("managed_2")){
                    deployTargets[0]=targets[temp];
          ProgressObject processStatus=deployManager.distribute(deployTargets, new
                    File("\\\\10.0.0.47\\Builds\\VertexTest\\domain1\\tc3.3b74_6.2.2011.19\\test.ear"), null,options);
          DeploymentStatus deploymentStatus=processStatus.getDeploymentStatus() ;
          System.out.println("UnDeploymentStayus.getMessage(): "+deploymentStatus.getMessage() );
System.out.println("Start sleeping");
          Thread.sleep(10000);
System.out.println("End sleeping");
          TargetModuleID[] targetModuleIDs=deployManager.getAvailableModules(ModuleType.EAR, deployTargets);
          System.out.println("\n\t targetModuleIDs [] = "+targetModuleIDs);
          for (int j=0;j<targetModuleIDs.length;j++){
               System.out.println("\n\t "+targetModuleIDs[j]);
               deployManager.start(targetModuleIDs);
               deployManager.start(targetModuleIDs);
}This code successfully deployed my application on desired managed server but my application is in 'Prepared' state instead of 'Active' state.
Currently, I have to manually update my application's state to 'Active'.
Can anybody tell me if I am missing something in my code.

It actually looks fine, but what could be the problem is the time to deploy your application and
the sleep command of ten seconds. When your sleep is finished, is your application deployment finished?
Maybe you can add a while loop using the isCompleted method of the DeploymentStatus class, for example,
ProgressObject processStatus = deployManager.distribute(deployTargets, new File("\\\\10.0.0.47\\Builds\\VertexTest\\domain1\\tc3.3b74_6.2.2011.19\\test.ear"), null,options);
DeploymentStatus deploymentStatus = processStatus.getDeploymentStatus() ;
while (!deploymentStatus.isCompleted()) {
    Thread.sleep(1000);
TargetModuleID[] targetModuleIDs = deployManager.getAvailableModules(ModuleType.EAR, deployTargets);
System.out.println(targetModuleIDs);
if (targetModuleIDs.length > 0) {
    deployManager.start(targetModuleIDs);
}Or something else along those lines.

Active state not working in scrolling site (with anchor links)

I'm design a scrolling site with anchor links and an horizontal menu on the top.
when i publish the site and click on the menu buttons the site scrolling to the place of the anchor but the active state in the menu is not working.
now... when i leave the main page (were the scrolling site is) and then return back to it all active states are working perfectly
anyone have this bug? or any one know how to fix it ?

Hmmm...I've just been playing around, and I think I got the Active State to work correctly. I think my problem was not understand what Active State means.
To answer your question, I was changing the Font Color and Box Fill Color of the Active State.
I did not understand that Active State means the look of the Menu Item when the PAGE is active. I thought it meant the look of the Menu item when the cursor is scrolling down the Menu (i.e. when the MENU is Active, not the page).
Look at this page for an example of what I'm trying to achieve...
http://www.pgavdestinations.com
When you hover over the "Work" menu item, and move the cursor down the menu, the state of "Work" remains changed until you move the cursor off of that menu column. It does NOT return back to it's Normal state until you are off of that menu column.
Is there a way to achieve this with the menu states in Muse?
Thanks for the replies!
Dave.

Most of the triggers in my composition are not showing there active state

I have a composition with 18 triggers.
Each trigger has a b/w image that should turn to a colour image when active or rolled over but only the two on the 3rd row work correctly.
The others do change when rolled over but when I roll off, even when still active they go back to their normal state.
Also when the composition plays through only the same two triggers will show the correct active state whilst active.
http://boastassociates08.businesscatalyst.com/projects.html
this happens in all methods of preview.
i have checked and all triggers have the correct images on each state.
Thanks

I figured it out. all trigger also have a link to another page on the site, all but two anyway.
so the triggers states are reacting as if it is just a link rather than it being a trigger in a composition.
does somebody know a way that will allow me to have the triggers states react the way i want and for the triggers to act as a link?

Photoshop Button in Active State Returns to Normal After Rollover?

Hello,
I'm working on a glossary reference website in Muse, and have hit a roadblock with my photoshop buttons.
I have created menu buttons in Photoshop that have two different states - one for active and rollover, and another for normal and down (the button is actually saved with four different layers/states, one for each, but for what the user will see, it's really only two options). I've used these menu buttons as rollover triggers for blank compositions, and when the user rolls over the button, the name of the page appears below it, and then disappears on rollout (otherwise the names would overlap and it would look very cluttered).
The issue that I have found is that, when I preview the page in my browser, the buttons appear to function properly in that they show up in the active state indicating that the page that they are linked to is the one that they are on.
Initial View - Home Page:
...and when I rollover the image of the page that I am currently on, the button shows the name of the page as desired, like so:
However, when I rollout, the button reverts back to the normal/down state, even though I am still on the home page.
Below is a screenshot of the composition settings that I have set up for this widget. I tried switching the "Hide Target" to none, but since the target is referring to the word "Home", the word "Home" remained visible in addition to the button remaining in the active state, which is not what I want. I also tried selecting "Triggers on Top", but the issue was not solved here either.
What am I missing? How can I make sure that my button remains in the active state when on the page that it is linked to?
Thanks for your help!
Rachel

Sounds like a bug that's the fallout of the overloaded meaning of "Active" state. "Active" is both the state used for an item with a hyperlink applied that points to the current page (or an anchor point in the current scroll range on the current page) and the state used for a trigger or thumbnail in a Composition or Slideshow widget that corresponds to the a current active item in the composition or slideshow.
It appears we honor the hyperlink definition of "Active" on page load for a composition trigger with a hyperlink to the current page applied, but don't honor that definition of active when transition to having no items in the composition active (or presumable when transition to having a different item in the composition active).
The only workaround that comes to mind would be the very tedious approach of replicating this composition widget on each page, removing the hyperlink on the "active" trigger and manually formatting it's "Normal" state to appear active.
I've written up the bug. However, it may not get fixed immediately. (We tend to collect smaller fixes in an area and then address them all at once or when other changes are planned in that area, due to the overhead involved in ramping up to work on an area and thoroughly retest it after changes.)

WCF-SQL Adapter Hangs in Active State for hours

I'm at a new client, and doing a simple test with a content-based-routing solution picks up a file, maps it, and is supposed to update a SQL database. The WCF-SQL send port is stuck in the "active" state. No messages in EventLog. If there's
an issue, I don't know why it doesn't just suspend.
Any ideas?
Thanks,
Neal Walters

Hi Neal,
Few things to check IMO,
Check if the host instance is running properly
Check the version of the Host instance, If required make the host instance to 32 bit.
If it is using any schemas then make sure the binaries are deployed and gace'ed
Try to restart the BizTalk host instance to see if it makes a difference
Check if your SQL Database Instance is UP and running , Make sure the BizTalk service Account has proper rights on the SQL server and has execute permission on the SQL Stored procedure (if using one)
Check if you have anything on the SQL server event viewer.
Try to complete you routing of file using a send port also which will copy the input message to a temp folder location , Try Using Failed Message Routing to see
if it helps!
There is an article
Configuring a Port Using the WCF-SQL Adapter for further reference.
HTH,
Naushad Alam
When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or
Mark As Answer
alamnaushad.wordpress.com
My new TechNet Wiki
"BizTalk Server: Performance Tuning & Optimization"

Chain is in active state

Hi,
While scheduling process chain for masterdata, it showing still chain is in active state, getting this problem from last four days, please help me out how to get the status for the same and solution too. would be highly apprecitable for the proper feedback.
Chandan

Hi Chanda,
Goto your PC in log view mode now, goto the node which is in yellow from llast few days. Now in rsmon, try checking its status, so that you can identify the problem behind that. You can also use the step by step troubleshooting option there in rsmon in understanding your problem.
Revert back for further queries.
Regards,
Rajkandula

Enhancement is in active state but not giving result.

Hi All,
Could you pls help me with this. I created an enchancement for a function module MARM_GENERIC_READ_WITH_MATNR. The enchancement is in active state but not giving the result. The result before and after enchancement is the same.
Thanks,
GC

Hi Guru,
If you have created an implicit enhancement point you need to make sure that enahncement point is active and as well the Function Module is also Active.
Second thing is that if you have written any code inside the enhancement point, then make sure that you are entering the Ehancement point coding block.
For this do put a break point and do a debug test the coding - what exactly happens through the Coding.
It may be that the Coding Block inside the Enhancement point is not getting executed or the ehancement point is not getting executed(chekc for what reason ?)
Based on the abvove inputs hope you would have got some clue or would have got the solution.
If found useful please do reward
Encourage others to answer your queries by rewarding them suitably
Thanks
Venugopal

How to create active state or current state in spry menu ?

i have build a vertical menu with spry menu widget, Just
wondering if any one can guide me how to create an active state or
current state in the menu.
I want the visitor to understand which page they are on, so
just want to change the colour of the active link.

<helpful but self-serving too>
There are several ways to do this, but the easiest way, if I
may say so,
is to use my divaGPS Extension. It works with virtually any
menu type
and is designed to accomplish precisely what you are asking
for quickly
and easily.
</back to our regularly scheduled programming>
E. Michael Brandt
www.divaHTML.com
divaPOP : standards-compliant popup windows
divaGPS : you-are-here menu highlighting
divaFAQ : FAQ pages with pizazz
www.valleywebdesigns.com
JustSo PictureWindow
JustSo PhotoAlbum

OPC Server Not going to active state

When we add a single virtual Analog input channel on a PXI 4351 card the opc sevrer cannot be started by the tag engine. The error message is that it cannot be set to the active state. Removing the single analog input channel solves the problem. We have 100 tags 6 of them are analog and the remainder digital i/o. Does anybody know how to get the opc server to accept the new channel?

When we add a single virtual Analog input channel on a PXI 4351 card the opc sevrer cannot be started by the tag engine. The error message is that it cannot be set to the active state. Removing the single analog input channel solves the problem. We have 100 tags 6 of them are analog and the remainder digital i/o. Does anybody know how to get the opc server to accept the new channel?

Menu item moves in active state

I'm using the "Right Icon" to implement a long vertical seperator between menu items:
laurensilverceramics.businesscatalyst.com
I've deleted the Rollover, Mouse-Down and Active states of the menu items. But when a menu item becomes active - it move put by 20 pixels or so. Any idea on how I can fix this?

Hi Ryan,
From looking at the navigation on the site and the corresponding code, it seems you are using a Composition Widget rather than a Menu Widget. The code generated for the Industries link is different than the others as if in its case, the link was applied to chunks of text/content inside the trigger rather than the trigger itself. Recreating that particular item in the composition and applying link just like others should apparently fix this. I would appreciate if you could send your current .muse file to [email protected] along with a reference to this forum thread and mark it to my attention in the Subject? If the file is larger than 20MB, please use an online file sharing service such as WeTransfer or YouSendIt.
Cheers,
Vikas

Cisco ASA HA Setup in ACTIVE - ACTIVE State

Similar Messages

Maybe you are looking for