Need to "move" failover to different interface/port
Sorry if this is the wrong area, we have so seldom had questions that were not otherwise handled I don't frequent this area.
How difficult is it to change the interface used for active/standby failover? It's a working, already configured pair with standby, but I need to move the crossover cable and tell them to use a different interface.
ASA 5510 pair, already set up and working with failover that was originally configured on Ethernet port 0/3 by the senior network admin. It appears that from his use of interfaces or ports he used things straight out of examples on the web, including the interfaces used.
The senior network admin retired last spring and left me "in charge", gee, thanks.
I need to make some changes and need an Ethernet port for a new important project.
The Management 0/0 interface is unused and shutdown. We manage via inside interface from a specific subnet inside so don't need the dedicated management interface.
I want to move failover FROM Ethernet 0/3 TO Management 0/0
*This is the current setup:
Result of the command: "sh run failover"
failover
failover lan unit primary
failover lan interface failover Ethernet0/3
failover link failover Ethernet0/3
failover interface ip failover 169.254.255.1 255.255.255.252 standby 169.254.255.2
*And this is the current interface configuration for 0/3 and Management:
interface Ethernet0/3
description LAN/STATE Failover Interface
interface Management0/0
speed 100
duplex full
shutdown
nameif management
security-level 0
no ip address
ospf cost 10
I know it can run on the Management 0/0 interface because I see a lot of "how to configure" as if the ASA is brand new and several examples out there indeed show it being setup on Management.
I'm looking for how to take an ASA pair that is currently configured and has a working functional failover configuration and simply "move failover" to a different hole or change the interfaces used for the "heartbeat" as it were.
I assume it's not hard - but I also assume there's a specific sequence of events that must take place to prevent the pair from going into failover and switching lead roles...........
For example - would I shut off or turn off failover, and if so how, and on which ASA (frankly, I'm not sure how to access the secondary or standby if this must be done from or on the standby unit as I've never done that "deep" a config before)
CLI is fine - I'd be just as comfortable in either ASDM or cli.
I sure hope this makes sense - I'm more of a troubleshooter and fixer than a designer or network engineer....
And many many thanks - getting this moved will free up the interface I need and can really make a big dent in my project list while the supervisor is on vacation this week! I'd love to have this done and working before his return.
Oh, in case it does matter as I've been told, this is the Currently running license and versions shown here:
Cisco Adaptive Security Appliance Software Version 8.4(4)1
Device Manager Version 6.4(7)
Compiled on Thu 14-Jun-12 11:20 by builders
System image file is "disk0:/asa844-1-k8.bin"
Config file at boot was "startup-config"
VRDSMFW1 up 141 days 4 hours
failover cluster up 141 days 4 hours
Hardware: ASA5510, 1024 MB RAM, CPU Pentium 4 Celeron 1600 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xfff00000, 1024KB
Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.06
Number of accelerators: 1
0: Ext: Ethernet0/0 : address is 0024.972b.e020, irq 9
1: Ext: Ethernet0/1 : address is 0024.972b.e021, irq 9
2: Ext: Ethernet0/2 : address is 0024.972b.e022, irq 9
3: Ext: Ethernet0/3 : address is 0024.972b.e023, irq 9
4: Ext: Management0/0 : address is 0024.972b.e01f, irq 11
5: Int: Not used : irq 11
6: Int: Not used : irq 5
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 100 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
VPN-DES : Enabled perpetual
VPN-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : 250 perpetual
Other VPN Peers : 250 perpetual
Total VPN Peers : 250 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
This platform has an ASA 5510 Security Plus license.
Failover cluster licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 100 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
VPN-DES : Enabled perpetual
VPN-3DES-AES : Enabled perpetual
Security Contexts : 4 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 4 perpetual
AnyConnect Essentials : 250 perpetual
Other VPN Peers : 250 perpetual
Total VPN Peers : 250 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 4 perpetual
Total UC Proxy Sessions : 4 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
This platform has an ASA 5510 Security Plus license.
Serial Number: ABC12345678
Running Permanent Activation Key: eieioandapartridgeinapeartree
Configuration register is 0x1
Configuration last modified by me at 15:03:07.132 CDT Mon Sep 15 2014
If there was a "smack-self-on-forehead" icon here I'd use it now.
Of course, totally logical - if you disconnect a monitored connection on the standby it's not about to take over as primary because it's had a failure and can't do the job, forcing the primary or active to remain that way. There's the key that would allow all other changes.
Since the settings or config lines are in place already, then if I'm correct it's a matter of then just modifying what's there, and of course removing the name of the Management interface (no nameif) and making sure it's not shut down (no shutdown), etc.
You are a handy person to have around. Thanks.
By the way, *thanks to prior answers received here* and reading responses to others who had questions I can say I've set a record for this agency and done what no one else had been able to do - I've taken a troublesome LAN-to-LAN connection and made it trouble-free with a solid connection that is just 7.5 hours away from being up 90 days with no interruption, no collapse of any SA and improved performance. I have 2 others out of our 34 that aren't too far behind that. The boss has recognized this after seeing his monthly up-time reports.
Once I get this done failover change made I will be setting up a "DMZ" of sorts and trying out my hand at telling the 5510s to forward specific traffic aimed at a specific public IP address to a specific server. (But that's another topic............)
Similar Messages
-
Need to move website with different mac than one used to create it
I created my web page years ago in another mac. I can't update it anymore, but now I need to move it and can't use the old mac. Help pls. web: www.jillnanfeldt.com
If you don't have the domain file that was used by iWeb to create the site you'll have to recreate it from scratch.
Chapter 2.3 on the iWeb FAQ.org site has tips on using some of the existing files, image, audio, video, etc., from the published site in the creation of the new site.
OT -
The USB ports on my 30" Cinema HD display appear to not work. The monitor has not been used for almost a year, when I upgraded to a new Mac Book Pro and the 27" retina display. Now I need to move the computer back and forth between two locations using the two displays. The need for operating USB ports is essential. Any ideas. The display appears entirely normal. Am running OS X 10.9.
Disregard, problem solved.
-
Need a clean way to talk to different serial ports simultaneously?
I need to be able to read from/write to four different serial ports simultaniously.
I'm trying to make a subvi called Tip.vi that handles all the actual writing, reading and parsing of data from a single port. I want to use 4 (instances/copies/whatever) of Tip.vi within a Main.vi.
Main.vi deals with user interactions, data gathering etc. Tip.vi has a string that get's updated with whatever bytes are currently available at the port. I want to keep this string within Tip.vi, not have to pass this to/from Main.vi.
I had all this working great with just one Tip.vi. When I added a second Tip.vi bad things happend.
if two copies of the same code, named differently, was used, one Tip.vi seemed to keep the second Tip.vi from running enough.
if just the subvi Tip.vi is made reentrent the strings from different ports would get jumbled together, not stay seperate.
if the code Tip.vi and all of it's subvi's reentrent still the strings would get jumbled.
I tried making a template out of Tip.vi (so it's Tip.vit) but it wouldn't instantiate in Main.vi
I recognize that the VISA Read used in every Tip.vi will all happen serially, I can't figure out how to make VISA Read reentrenet.
I give up. How can I read/write to two ports simultaniously. Some sample code would be great.
Thanks very much for the help-
ArielHi Ariel,
Will each instance of Tip.vi use a different serial port? If so, then the first method should work, as long as you are opening different VISA Sessions to individual resources. What do you mean by "one Tip.vi seemed to keep the second Tip.vi from running enough"? It could be a simple dataflow issue, that could be corrected through using sequence structures or some other method to ensure order-of-execution.
John M
Applications Engineer -
I need to transfer files applications etc from a Mac Book Pro to a Mac Book, but I want certain files/applicaitons to be available only to certain users. DO I transfer everything first then move it into different accounts or can I set up the different user accounts first & select what goes where when I migrate?
ThxDo you have a backup that you can restore from? Your old hard drive seems to be the problem.
-
Can any one tell me how can I move to a different folder pictures, that I've cloned, without them staying aggregated? They all come together to the other folder and I don't want that… thanks
There's more to it than that.
Folders in Aperture do not hold Images. They hold Projects and Albums. You cannot put an Image in a Folder without putting it in a Project or an Album inside that Folder.
The relationship between Projects and Images is special: every Image must in a Project, and can be in only one Project.
Images can be in as many Albums you want. Putting an Image in an Album does not move it from the Project that holds it.
You can make as many Versions from a Master as you want.
What you want to do may appear simple to you, but it still much adhere to how Aperture works. I still can't tell exactly what you are trying to do (specifically: Images don't live in Folders; moving an Image from a Folder is non-sensical).
It can be very confusing (and frustrating) to get going with Aperture -- but it does work, and can be enormously helpful. If you haven't, take a look at the video tutorials on Apple's Aperture support site.
I feel as though I haven't helped you much -- but we need to be using the same names for interface items in order to get anything done -- and my sense is that you still haven't learned the names of the parts. -
Daisy Chain 2 different interfaces
Hello fellow plug in lovers,
Is it possible to daisy chain 2 different interfaces together.
I.e 1 x RME Firface 800 and MOTU Ultralite.
To give me 16 outputs of analog output.
Your help, as always is much appreciated
Ta
P.s Hello SieAre these both Firewire devices? If so you can daisychain the firewire, but I think you will need to create an aggregate device in the AUDIO/MIDI setup in OSX. this means effectively telling Core Audio that the 2 devices are to be treated as one and that all ins and outs should be recognised.
On the other hand if one of your devices has 8 audio and 8 digital connections and the other device is an analogue to digital converter plugged into the first item's ADAT ports (if that's what it has) Then, as Blayzay says, you don't need to create an aggregate device for that.
For us to be more specific we need to know exactly what in and out ports both devices have and how you intend to connect them, either to each otheer, or both to the computer. -
My macbook does not have a firewire port. Is there any kind of adapter that will allow me to use my advc 300 (which need to plug in to the FireWire port)?
Firewire, USB and the recent thunderbolt use completely different protocols, therefore there are no adapters for mutually adapting them, just a computer, which allows connecting them, and will work as an interface. For example, if you have an external disk in an enclosure with only FW connection and another one with USB connection, just your mac, having both, allows their interconnectivity.
If your mac does not have FW (the brief alu MB series, Air) you cannot connect a FW device, if only FW port is there. -
I have a 15 year old account in Yahoo Mail I need to move to my local drive? How to..?
I have 15 years of emails on Yahoo Mail I'm trying desperately to migrate to my local drives. Everytime I attempt to use Thunderbird in IMAP mode to download them it fails; everytime I attempt to use Thunderbird in POP mode, it fails. What am I doing wrong to achieve this goal with Thunderbird? I am getting desperate.. please advise. These Yahoo Mail emails cover more than one half of my entire career as an IT professional - and I can't even do this simple task. I'm beginning to question MY abilities as a professional. Sometimes we all need help.. and I need yours now. Thanks in advance...
Thunderbird gets through about 40,507 emails - then just freezes; no errors; no interfaces disconnect (menus still work, etc.) but Task Manager says NOT RESPONDING? Yes I can gracefully exit Thunderbird and reenter Thunderbird to the same place ONLY? Weird.. I'm sure I have it setup wrong so I probably only need some guidance in setting it up as an INDUSTRIAL GRADE archiver which I know it was not meant to be.move them to different folders on yahoo using webmail.
then you start Tbird and have your Yahoo-account set up as IMAP.
one by one you subscribe to those folders, when one is downloaded move them to local folders. compact the old folder and subscribe to the next one. -
Move disks to different SE3310 array and keep RAID?
Hello.
I've got a StorEdge 3310 with 5 disks making up a RAID5. I now needed to move these disks to a different 3310. Now with those 5 disks in the "new" array, how do I tell it to "rebuild" the RAID, so that I have access to the data in the RAID again?
I've read the documentation on http://docs.sun.com/app/docs/coll/3310scsi-array and haven't been able to find a note on how to do this. I also checked the options available in the telnet interface and also don't find anything.
Could someone please tell me how this can be done? Or is this not possible using a 3310?
It would kind of surprise me, if this were impossible to do - suppose the SE array breaks (ie. just the array, not the disks), what would you do in such a case? Restore from tape?
Thanks a lot,
AlexanderMove the music files or a folder containing them into the /Users/Shared/ folder, and from there into the open iTunes window. They're in the Music item of the Finder's sidebar by default.
(47731) -
My computer runs on Windows 7, and I've installed and updated the latest versions of itunes etc, but still to no avail! I've tried different usb ports, troubleshooting, etc... But it still says "One of the USB decuces arrached to this omputer has malfunctioned and windows does not recognize it".
The iPod is brand new, sent to me by Apple as part of the 1st gen replacement programme. I've been using the cable that came with the 1st gen iPod (I bought the first gen second hand) It always worked on my computer with the 1st gen iPod. So I was wondering, do you think I need to replace my cable in order for my PC to recognize my iPod or is it something else?
ThanksTry a different cable. And are you connecting directly to your computer or through a USB hub?
-
I have just brought 2 mini's for my boys for xmas. 1. can I connect them both to my existing Itunes account or do I need to set up something different. and 2. can they be used on their dads account as well as mine, or only one?
You can set them up with your Apple ID if you want to. You can also set them up with their dad's Apple ID. Depending on how old the boys are, you can even let then have their own Apple ID's. The one thing that you don't want to do is have them use more than one Apple ID on their iPads.
If you want to be able to share purchased content, then setting them up with either your ID or your husband's (?) ID would be the way to go. If the boys share an ID with one of you, they can download content that you have already purchased without having to pay for it again.
If you and have the financial wherewithal to allow them to purchase their own individual content, I would recommend letting them have their own Apple ID. This way, as they grow older and eventually move on, they will have their own accounts, their own purchases .... No ties needed to your ID or to dad's ID. FaceTime and Messages will be a little easier to set up if they have their own ID's and they can have their own iCloud accounts as well. However, they must be 13 years old in order to have an Apple ID and iTunes account. If they are under 13, then it's a no brainer you will have to use yours or their father's ID.
Whatever you decide to do, just don't switch from one ID to another ID on the iPads. That gets confusing and they could end up locking themselves out of one of the ID's for 90 days if they download a past purchase using a different ID. -
What is the best way to move files to different folders in a plug-in?
I am writing a plug-in that needs to move files on the hard drive. I am using LrFileUtils.move(from, to) and everything is fine except that the catalog is not updated when the file is moved. After the plug-in runs I can use Library > Synchronize Folder to get the catalog back in sync with the new locations of the photos on the drive, but this manual step is less than ideal.
I am unable to find a way to move the files within the plug in that also updates the catalog (like dragging photos to a new location within the LR Navigator pane). Lacking an API for this, I looked for a way to programmatic execute the Synchronize Folder menu item, but was not able to find this either..
Can anyone recommend a better way to move photos to different folders within a plug-in that also updates the catalog?Hi Andy,
There are 3 main file formats that you can consider writing your data out to in LabVIEW:
ASCII
Binary
Datalog
ASCII
ASCII files are useful because every operating system and almost every application can read/write ASCII format files. Use ASCII files when:
Other users or applications will need to access the data file.
You will not need to perform random access file I/O
File I/O speed is not crucial
Disk space is not crucial
Examples within LabVIEW Example Finder: Fundamentals >> File Input and Output >> Write to Text File.vi and Read from Text File.vi
Binary
Binary byte stream files are more specific to data storage and retrieval. Use b
inary files when:
File I/O will remain in LabVIEW only -- no other applications will be needing to write/read that file. There is no standard formatting for binary files and thus other applications or operating systems may be unable to read the file.
Files are smaller than ASCII files
Easier and faster random access to data
Examples within LabVIEW Example Finder: Fundamentals >> File Input and Output >> Write Binary File.vi and Read Binary File.vi
Datalog
When to use datalog:
If you need to record data with a mixture of types, it can be cumbersome to convert everything to ASCII or to keep track of the binary formatting.
Datalog format is binary and internal to LabVIEW, so again only use this format if no other applications or operating systems will be needing to perform file I/O on the file.
Examples within LabVIEW Example Finder: Fundamentals >> File Input and Output >> Write Datalog File
Example.vi and Read Datalog File Example.vi
Good luck!
Kileen C.
Applications Engineer
National Instruments -
Software needed for the USB device, "USB Interface Controller TEST2.0"
My mother recently acquired a digital camera. She acquired it from a second-hand store, which did not include an interface cable or software. The manual (and the USB port on the camera) indicates that a male-male USB cable is necessary for photos to be copied to the hard drive.
I was not successful in locating such a cable at any local electronics store (I assume such a cable is now out-of-date). I purchased one from a seller on eBay. The brand is "e circuit electronics".
Upon powering up the camera with the cable connected to it and the computer, the following message appeared:
"Software needed for the USB device "USB Interface Controller TEST2.0" is not available. Would you like to look for the software on the Internet?"
I clicked "Yes". After an approximate two-minute wait, another message appeared stating:
"Software Update is not able to connect to the Internet. Please check your configuration and try again."
I deleted, "Software Update Preferences" in the Preferences folder inside the System Folder, without solving the problem. How do I solve the issue of allowing Software Update to connect to the Internet?Thank you for your continued assistance, BDAqua. Unfortunately, the driver you linked to does not seem to be compatible with the camera. It is a driver for the V20 model, whereas my model would correspond to be a V2755, as referenced from a list of other Vivicam models when during a search at the Open Drivers web site.
From the system requirement about the card reader you gave me, it will not work, as this system is running 9.1. I am hesistant to upgrade this computer to 9.2, as I have experienced system unstability with that version, with even the 9.2.2 update applied.
In the mean time, I have e-mailed Vivitar regarding this issue, but have as of yet received a reply.
I am not certain as to other specifics to give you, in order to solve the Software Update problem. Please elaborate.
Yes eww, the computer in question is able to fully connect to the Internet for all that I need. I am fully aware of the difference between a computer connecting to the Internet, and a computer connecting to a digital camera. I have 15 years of Macintosh experience. -
Synching error with different USB port
I set up my iPhone and had no problems synching with iTunes. I then changed to a different USB port than the one I had originally used. I began to recieve the following error when I tryed to synch "0xE800001". I then switched to a different usb port and everything worked fine.
Is there any way to get iPhone to work with the new usb port because that is the only port that charges when my computer is off.Check out article below for tips and suggestions
iPhone: Troubleshooting USB connections
http://support.apple.com/kb/TS1286
Make sure you perform all Vista Software updates, also visit your PC manufacture website and download and install latest drivers for your PC hardware.
Also ensure you are not connecting via a USB Hub or using a USB extension cable.
If it only gives that error message in 1 USB port and not others. Try disconnecting any un-needed USB devices. Then connect back to that port and try syncing again.
Maybe you are looking for
-
I can't shut down my computer because it says mail is open. It says to close mail and continue shut down. Problem is I can't open or close mail now. Can't shut down my computer at all. What can I do?
-
Trying to get Firefox to open in User Agent "Internet Explorer"
I run an Internet Cafe and have recently installed Ubuntu 10.04 over Micro$oft. I HAVE to give customers an alternative to Live Messenger. I have TokBox setup .. but gives problems now & then. I need to cover all bases or lose customers. The only via
-
The statement comes up: The file "iTunes Library.itl cannot be read because it was created by a newer version of iTunes. Any suggestions how to fix?
-
Hi I do not understand why I am getting this warning below WARNING: Actions on button or MovieClip instances are not supported in ActionScript 3.0. All scripts on object instances will be ignored. Can someone help? mimi
-
Problems with "corrupt" ipod when trying to sync
To elaborate on the title Ever since downloading itune version 11 (and something) I've had a complete nightmare. Kept getting lots of technical warnings that I didn't understand. After reading lots of websites etc of people with same problem, I ended