Failover exec active write mem

Hi Everyone,
I was doing config change on firewall in multicontext mode.
IT has 2 contexts admin and X.
I log into admin context via ASDM and switch to context X with the ASDM as need to make changes to context firewall X.
When i config the changes via asdm and click on apply it show me message
failover exec active write mem followed by ACL which i was going to apply.
Need to confirm if above command is safe to run on production network without causing any issues?
Finally i logged into Context X which was admin for that and made the chnages via CLI.

hi mahesh,
i'm suspecting you're making changes in context x from the standby unit. you could verify with show failover command.
it's safe to assume to issue a failover exec active write mem since you're just saving the config for the active unit.
you could alternatively use the write memory all command to save the system and all context config changes.

Similar Messages

Failover exec and command authorization

Hi, got into a dead end here. I have a pair of ASA firewalls running as active/standby. I'd like to use the 'failover exec' to issue commands on the standby firewall via the active one. This shouldn't be a problem, but we have AAA command authorization configured. And when the active ASA tries to issue a command on the stadby ASA, it gets a 'authorization denied' message. At the ACS we see the auth request being denied, the ASA sends the request using the 'enable_1' user, instead of using the same user connected to the active ASA.
Any clues on how to go around this?
thanks!

Remote command execution lets you send commands entered at the command line to a specific failover peer.
Because configuration commands are replicated from the active unit or context to the standby unit or context, you can use the failover exec command to enter configuration commands on the correct unit, no matter which unit you are logged-in to. For example, if you are logged-in to the standby unit, you can use the failover exec active command to send configuration changes to the active unit. Those changes are then replicated to the standby unit. Do not use the failover exec command to send configuration commands to the standby unit or context; those configuration changes are not replicated to the active unit and the two configurations will no longer be synchronized.
To send a command to a failover peer, perform the steps given in the below URL:
http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/failover.html#wp1154924
The below URL helps you in configuring the Active/standby failover:
http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/failover.html#wp1058096

Write mem command on ACE

Does ACE , automatically save the running config to startup config ,or I need save the config on the primary whenever I make changes .
As till date I thought that the config will be saved automatically ,until I ran into an issues.
Had setup my ACE in active standby . Recently added couple vips on the primary ,and dint do write mem.
for some reason primary went offline ,secondary took over ,but bcoz of preempt enabled ,when primary was back online ,it tried taking over ,but there was a config mismatch .
And I see the both the LBs status as active /active.
Can any please clarify ,this as just bcoz of not running the write mem all ,it happened that both my ACEs became active/active .
which created a problem in our lab environment

Active/active will happen only when there is a communication problem between the two ACE modules, other factors (like config mismatch, certificate mismatch) will not cause this. have you checked FT related logs at time of primary ACE reload.
regarding config mismatch case also, when primary ace boots up (if there is a proper communication between two ACE module) it will not immidiately become active, it will move form all stages of FT which include Bulk sync also, where in both module try to sync their configuration. Even if for some reason it fails, the situation will not result in Active/active.
only make sure that your FT config was present in your startup config at time of boot

Error getting while activating Write Optimzed DSO

Hi Exerts,
I am getting the below error whil i am activation Write Oprtimized DSO
Error in global conversion rule for InfoObject ZGSOURSYS
ZGSOURSYS--- this is compunding attr of all my char.
Thanks in advance

Goto RDS1 -->check if the ZGSOURSYS object active or not?
Check if there are any transfer routine or conversion routine. if there is no routine
just add some line of code in the transfer routine and save it.
delete the added line of code and again save the transfer routine. activate the infoobject.
just saving the transfer routine and activating the infoobject should also help.
Re: Errors with the global conversion rule for the field 0SOURSYSTEM.

Error when doing a write mem on 3525 router

When I change the config on our 3525 router and then do a write mem command I get the following.
[OK]private-config file open failed (File table overflow)
Any one seen this?
Mike

Sorry...I had the info just forgot to put it in the question...just grabbed it again.
3825#show ver
Cisco IOS Software, 3800 Software (C3825-ADVIPSERVICESK9-M), Version 12.4(20)T1, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Wed 24-Sep-08 18:40 by prod_rel_team
ROM: System Bootstrap, Version 12.4(13r)T10, RELEASE SOFTWARE (fc1)
PRS_3825 uptime is 9 weeks, 42 minutes
System returned to ROM by power-on
System restarted at 22:11:16 CET Tue Oct 28 2008
System image file is "flash:c3825-advipservicesk9-mz.124-20.T1.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected]
Cisco 3825 (revision 1.2) with 487423K/36864K bytes of memory.
Processor board ID FCZ123772WN
2 Gigabit Ethernet interfaces
35 Serial interfaces
3 Channelized/Clear E1/PRI ports
1 Virtual Private Network (VPN) Module
4 Voice FXO interfaces
DRAM configuration is 64 bits wide with parity enabled.
479K bytes of NVRAM.
125440K bytes of ATA System CompactFlash (Read/Write)
Configuration register is 0x2102

UCCX 8.0 SNMP notification to report failover from active to the standby server?

Does any know the UCCX 8.0 SNMP notification to report failover from active to the standby server? (The specific notification.)
ftp://ftp.cisco.com/pub/mibs/v2/CISCO-VOICE-APPS-MIB.my
I see this in the MIB.
cvaModuleStart NOTIFICATION-TYPE
OBJECTS   { cvaAlarmSeverity, cvaModuleName }
STATUS    current
DESCRIPTION
        "A cvaModuleStart notification signifies that an
        application module or subsystem has successfully
        started and transitioned into in-service state.
        This notification is working in conjunction with
        the cvaModuleStop notification to notify the start
        and stop status of a particular application module."
::= {ciscoVoiceAppsMIBNotifications 1}

Attached are two files:
cad-ecc-viewer.html
This is a template HTML document which dictates how the pop up will look and what data fields are available.
cad-ecc-viewer.vbs
This is the Windows Scripting Host file which you run from a CDA workflow, and you pass it the values of the call data, it then launches an instance of IE and loads the above template.
By default the code is setup to use the following data from the call, but can be modified to work with more, less, or different data:
Customer Name
Customer Status (like Premium, or Platinum)
Customer Number (like an account number)
Customer Phone Number
So when you specify the VBS file to run in CDA you need to pass those variables in that order.
The CDA should expect the VBS file on the root of C:\ by default, and the VBS file expects the HTML Template on the root of C:\ also.
I have only tested this on UCCX 7x and IE 8x. Use the code as a guide to your own solution, that suites your business requirements.
EDIT: I see that this does not work on my Win7/IE9 system, so I will spend some time updating the code for Win7/IE9 and I'll let you know how it goes.
Anthony Holloway
Please use the star ratings to help drive great content to the top of searches.

Weird error when doing "write mem"

Whenever I performed "write mem", I am
getting this error:
NYC#wr
Building configuration...
% Configuration buffer full, can't add command: line vty 0
%Aborting Save. Compress the config.[OK]
NYC#
NYC#wr
Building configuration...
% Configuration buffer full, can't add command: line vty 0
%Aborting Save. Compress the config.[OK]
NYC#
Basically, I can not save my config into
the flash. How can I fix this? Thanks.
David
NYC#sh ver
Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-IK9O3S3-M), Version 12.3(12), RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Mon 29-Nov-04 15:40 by kellythw
Image text-base: 0x80008098, data-base: 0x819F9E70
ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)
ROM: C2600 Software (C2600-IK9O3S3-M), Version 12.3(12), RELEASE SOFTWARE (fc3)
NYC uptime is 2 days, 8 hours, 38 minutes
System returned to ROM by power-on
System restarted at 03:21:09 UTC Wed Feb 21 2007
System image file is "flash:c2600-ik9o3s3-mz.123-12.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco 2621 (MPC860) processor (revision 0x102) with 59392K/6144K bytes of memory.
Processor board ID xxxxxxx (xxxxxxx)
M860 processor: part number 0, mask 49
Bridging software.
X.25 software, Version 3.0.0.
3 FastEthernet/IEEE 802.3 interface(s)
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
NYC#

i got the same error..
Richardson-CE1(config)#wr do wr
Building configuration...
% Warning: Saving this config to nvram may corrupt any network management or security files stored at the end of nvram.
Continue? [no]:
% Configuration buffer full, can't add command: description ALLOW-GRE-IPSEC-PREFIXES-FROM-MIXME-ROUTER
%Aborting Save. Compress the config, Save it to flash or Free up space on device[OK]
Richardson-CE1(config)#
i did service compress-config but the router is very slow right now.. any thoughts what might be causing the slow response of the device?

Need EEM script for write mem config details.

Looking for an EEM script that will send an email of config details when a write mem is performed.
Any help would be appreciated as i'm new to EEM.

Something like this could work:
event manager applet email-write-mem
event cli pattern "^(write memory|write|copy running-config startup-config)*$" sync no skip no
action 0.5 info type routername
action 1.0 mail from [email protected] to [email protected] server 10.1.1.1 subject "Write mem on $_info_routername" body "A write mem was done on $_info_routername"

Write mem via SNMP?

Is there any way to perform a "write mem" or "copy run start" via SNMP (snmpget) on IOS, CatOS or PIX/ASA?

Thanks! I thought it wasn't possible, but I should've searched:
http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=Network%20Management&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1dd9fd99/0#selected_message
In the above thread, Nadim gave an example in which ccCopyEntryRowStatus was set to "5:createAndWait", whereas in the URL you pointed out "createAndGo(4) : Create an entry" and "destroy(6) : Delete an entry" were suggested. Would you know what the differences are between 4 (createAndGo) and 5 (createAndWait), specifically which one would you choose to commit a "write mem"?
Secondly, how is the random number below generated? Is that my choice?
snmpset -v 1 -c private
.1.3.6.1.4.1.9.9.96.1.1.1.1.2. integer 1
.1.3.6.1.4.1.9.9.96.1.1.1.1.3. integer 4
.1.3.6.1.4.1.9.9.96.1.1.1.1.4. integer 1
.1.3.6.1.4.1.9.9.96.1.1.1.1.5. ipaddress ""
.1.3.6.1.4.1.9.9.96.1.1.1.1.6. octetstring ""
.1.3.6.1.4.1.9.9.96.1.1.1.1.14. integer 4

Failover, SO activation sequence and Log

Hi
Wud u please clarify my following doubts :-
1. Failover
If a partition carries 3 failover service objects-. A, B & C - and if service object A fails, I
believe that the whole partition in replicated and reinstantiated. If so what happens to the
non-failed objects in old partition and the newly created clones of those objects in new partition?
Which one wud be used while referenced ?
My unerstanding is that it manages failover by partition than by objects so that failed partiton is
activated on some other assigned nodes.
2. Service object activation sequence
How the activation sequence of service objects are determined ? I have a strange problem. One of my
service object (in its init method) try invoking a method on another service object; but gives
"Attempt to invoke a method on a NIL object" exception. I inserted a loop above this line as
DO WHILE thisSO = NIL THEN
END DO;
flag = thisSO.GetStatus();
Still the exception occurs. The called service object reads from a flat file to populate its data
members. Can I change the activation sequence of service objects ? Both the service objects, talked
about here, belongs to same partition and are of USER visibility type.
3. Partition Log
The partition log generated overwrites the existing file if I specify a file name name using -fl
flag at command line. Is there anyway that I can make it to append to existing log ?
ThanX.. @nthoz
Anil Thomas Samuel(Team Leader)|Voice:(91 - 80)3322139,3324313,3322337
IBC Solutions India Pvt. Ltd. |Ext:40
#2201, 11th Main, A Block |Fax:(91 - 80) 3321369
2nd Stage, Rajajinagar |Web Pager:[email protected]
Bangalore, India - 560 010. |Visit us @ http://www.ibcweb.com
URL:http://members.tripod.com/~anthos/index.htm
***************************** Day's Quote *****************************
Underneath the table Greebo dozed on his back with his legs in the air. Occasionally he twitched as
he fought wolves in his sleep. - >From Witches Abroad by Terry Pratchetteck-up: who am I, where am
I, who is he/she, good god, why am I cuddling a policeman's helmet, what happened last night?stle.
Besides, it'd be sunrise soon. It's red eyes glinted as it looked up at Magrat's window. It tensed-
- From Witches Abroad by Terry Pratchettwho knew neither victory nor defeat." - Theodore Roosevelt
***************************** Day's Quote *****************************
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:<a href=
"http://pinehurst.sageit.com/listarchive/">http://pinehurst.sageit.com/listarchive/</a>>

Hi
Wud u please clarify my following doubts :-
1. Failover
If a partition carries 3 failover service objects-. A, B & C - and if service object A fails, I
believe that the whole partition in replicated and reinstantiated. If so what happens to the
non-failed objects in old partition and the newly created clones of those objects in new partition?
Which one wud be used while referenced ?
My unerstanding is that it manages failover by partition than by objects so that failed partiton is
activated on some other assigned nodes.
2. Service object activation sequence
How the activation sequence of service objects are determined ? I have a strange problem. One of my
service object (in its init method) try invoking a method on another service object; but gives
"Attempt to invoke a method on a NIL object" exception. I inserted a loop above this line as
DO WHILE thisSO = NIL THEN
END DO;
flag = thisSO.GetStatus();
Still the exception occurs. The called service object reads from a flat file to populate its data
members. Can I change the activation sequence of service objects ? Both the service objects, talked
about here, belongs to same partition and are of USER visibility type.
3. Partition Log
The partition log generated overwrites the existing file if I specify a file name name using -fl
flag at command line. Is there anyway that I can make it to append to existing log ?
ThanX.. @nthoz
Anil Thomas Samuel(Team Leader)|Voice:(91 - 80)3322139,3324313,3322337
IBC Solutions India Pvt. Ltd. |Ext:40
#2201, 11th Main, A Block |Fax:(91 - 80) 3321369
2nd Stage, Rajajinagar |Web Pager:[email protected]
Bangalore, India - 560 010. |Visit us @ http://www.ibcweb.com
URL:http://members.tripod.com/~anthos/index.htm
***************************** Day's Quote *****************************
Underneath the table Greebo dozed on his back with his legs in the air. Occasionally he twitched as
he fought wolves in his sleep. - >From Witches Abroad by Terry Pratchetteck-up: who am I, where am
I, who is he/she, good god, why am I cuddling a policeman's helmet, what happened last night?stle.
Besides, it'd be sunrise soon. It's red eyes glinted as it looked up at Magrat's window. It tensed-
- From Witches Abroad by Terry Pratchettwho knew neither victory nor defeat." - Theodore Roosevelt
***************************** Day's Quote *****************************
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:<a href=
"http://pinehurst.sageit.com/listarchive/">http://pinehurst.sageit.com/listarchive/</a>>

ASA write mem error in context

ASA# (this is system context)
context context
allocate-interface Port-channel2.1 INSIDE
config-url disk0:/configs/context.cfg
join-failover-group 1
i get following error in the context:
ASA/context# wr mem
Building configuration...
Cryptochecksum: 572d8a11 d1d409a0 ff1f3f82 16b31d26
%Error opening disk0:/configs/context.cfg (No such file or directory)
Error executing command
[FAILED]
how to resolve it?

Hi,
I very rarely have to play around with the Files and Folders of the ASA firewalls since once you originally set them up you dont really need to do anything more.
Only thing that came to mind fast is that you have:
Configured the context
Configured the "config-url" under the context
BUT you have NOT created the folder beforehand to the disk0:/
I don't remember if the "config-url" created the said folder but this might be something to check (as the error message states)
Check the Flash memory with
dir disk0:
Create the folder if need with
mkdir disk0:/configs/
Hope this helps
- Jouni

Ftp data transfering drops when failover from active to backup

Hi All,
I did a failover testing with 2 CSS11503 and found a ftp problem.
I ftp one file from the server which behind 2 CSS, I tried to force failover happen by shutdown external interface. The ftp transfering was also terminated.
How can I keep file still transfering when the active css failover to the backup one? Thanks.
!************************** SERVICE **************************
service ftp1
ip address x.x.x.186
port 21
keepalive port 21
keepalive type tcp
redundant-index 7
keepalive frequency 2
keepalive maxfailure 2
keepalive retryperiod 2
active
service ftp2
ip address x.x.x.189
port 21
keepalive port 21
keepalive type tcp
redundant-index 8
keepalive frequency 2
keepalive maxfailure 2
keepalive retryperiod 2
active
!*************************** OWNER ***************************
owner owner1
content content2
protocol tcp
port 21
add service ftp1
vip address 10.10.1.5
redundant-index 2
add service ftp2
application ftp-control
active
!*************************** GROUP ***************************
group ftpservers
vip address 10.10.1.5
add service ftp1
add service ftp2
redundant-index 11
active

could you try to force failover by rebooting the CSS.
Just want to see if we get the same result.
I'm going on vacation tonight so I won't be able to test until july 15th.
You can open a service request with the TAC and they can test if for you.
Or you can wait till july 15th and I'll do it for you [just repost a question on that day so I do not forget]
Gilles.

ASA Failover pair Active/Standby

Hi,
Two days ago I had a problem with secondary unit in the ASA HA. The problem is because of the CX module failed in the secondary unit (service module failed) showing the standby unit failed in the "show fail" output.
Just I reloaded CX module in the secondary unit and then it was working fine.
Now the same problem facing in Active unit. Kindly find the show fail output below. we are running ASA 5.1(5) in ASA and 9.3.2.1 system image in CX module.
SOC-FW# sh fail
Failover On
Failover unit Secondary
Failover LAN Interface: fail-1 GigabitEthernet0/4 (up)
Unit Poll frequency 1 seconds, holdtime 6 seconds
Interface Poll frequency 5 seconds, holdtime 25 seconds
Interface Policy 1
Monitored Interfaces 4 of 114 maximum
Version: Ours 9.1(5), Mate 9.1(5)
Last Failover at: 03:54:49 IST Mar 28 2015
This host: Secondary - Active
Active time: 206373 (sec)
slot 0: ASA5515 hw/sw rev (1.0/9.1(5)) status (Up Sys)
Interface OUTSIDE (112.133.222.218): Normal (Monitored)
Interface INSIDE (10.0.60.1): Normal (Monitored)
Interface DMZ_1 (10.0.40.1): Normal (Monitored)
Interface DMZ_2 (10.0.50.1): Normal (Monitored)
Interface management (172.16.10.49): Normal (Not-Monitored)
slot 1: CXSC5515 hw/sw rev (N/A/9.3.2.1) status (Up/Up)
ASA CX, 9.3.2.1, Up
Other host: Primary - Failed
Active time: 326213 (sec)
slot 0: ASA5515 hw/sw rev (1.0/9.1(5)) status (Up Sys)
Interface OUTSIDE (112.133.222.219): Normal (Monitored)
Interface INSIDE (10.0.60.2): Normal (Monitored)
Interface DMZ_1 (10.0.40.2): Normal (Monitored)
Interface DMZ_2 (10.0.50.2): Normal (Monitored)
Interface management (172.16.10.50): Normal (Not-Monitored)
slot 1: CXSC5515 hw/sw rev (N/A/9.3.2.1) status (Up/Down)
ASA CX, 9.3.2.1, Up
Kindly help if anybody have the solution.
Thanks in advance.
Thanks and regards,
Ashok Kumar S.

Hi,
Thank you for opening a separate thread. This seems to be the issue with the DATA plane going down on the CX module and causing the fail-over event.
Were there any configuration / updates etc done on the CX which caused this ?
I think this might require some diagnostics log analysis on the CX and so i would request you to open a Cisco TAC case.
If you want you can send the diagnostic from the CX to my email address and i can check the issue if possible. ([email protected])
Thanks and Regards,
Vibhor Amrodia

Runtime.exec() + getOutputStream() +write+me program=hang

I'm trying to write to the standard input of an external prorgram by using Runtime.exec() and writing to the outputstream of the process it creates. I write to the standard in and then wait for that process to finish using waitFor() but it just hangs there. Is there something special to do before writing the data?
There is nothing funky about my code, it's just basic stuff.
OutputStream out =process.getOutputStream();
out.write(data);
out.flush();
out.close();
process.wairFor();

Do you really know
1. That the process got the data and processed it?
2. That the process exited and you are still hanging?
Sorry if I'm just stating the obvious, but is the other process perhaps waiting for an end-of-line or end-of-input?
Finally, you didn't say what the other process technology is, but I've had some surprises when attempting to work between java and other technologies. Example: Other process was LEX, which uses a Windows flag to check for character or block input. Flag was set in a surprising manner when java was the source, and my LEX blocked forever.

ACS Local databse authentication as a failover to Active Directory

Hi all
Router- 10.10.10.1
ACS-10.10.10.2
AD-10.10.10.3
in AD - created a group called "telnet users" - added user with name of - john
I have added cisco router as clients in Cisco ACS 5.1 and integrated with Active directory. when i telnet to 10.10.10.1 , i can logon with Active directory account
but i want a faiover to active directory with ACS local database
Can you let me know how to configure?
In ACS - i have created a user with name of - Test1 and Identity group : all groups.
Can any one help please.

Hi,
You need to create an Identity Store Sequence and then select that Identity Store under the Identity section of the Access Service.
1.
2.
HTH,
Tiago
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Failover exec active write mem

Similar Messages

Maybe you are looking for