
If the peer’s control interface is also down, then failover does not occure and the failed interface is marked as “Failed”. The ASA sends additional testing packets to the remaining interfaces to determine where the peer’s control interface is also down.If it still does not receive a response from the active unit, it assumes that a failure has occured and takes over If 3 consecutive hello packets are missed, additional testing packets are sent to the remaining data-passing interfaces.– Standby unit has stopped receiving hello (or keepalive) packets on the failover interface.– Active unit has lost power or crashed due to a hardware or software defect.> “no failover active” on the active unit – Administrator has manually switched over from active to standby.Configuration replication from the active to standby.

Hello or keepalive messages (which are sent on all interfaces.*** When failover occurs, the standby unit takes over the IP and MAC address that were used by the previous unit This connection, known as theFAILOVER CONTROL LINK is established over a dedicated failover LAN interface. The active and standby units are connected through a dedicated network link and send failover-related messages to each other. Standby -> reponsible for monitoring the status of the active unit *** Same size Flash is not required **** Definitions:Īctive -> Responsibel for creating the state and translation tables, transferring the data packets and monitoring the other units.

