Options

Problem after ASA replacement

E Double UE Double U Member Posts: 2,229 ■■■■■■■■■■
in CCNP Security
We have an HA pair using 5510s version 8.4(5). The secondary unit is currently active because the primary has an issue. When we replaced the primary (we didn't failover yet) users reported issues with several services including webmail. The time people began reporting issues correlates to when our logs show the mgmt0/0 HW interface changed state to up.
We could see tcp connections building, but getting resets on the teardown. We powered down the new ASA, but the problem remained. During our troubleshooting everything just started working again without us making any changes. We thought it could be an ISP issue, but other services going out of the connection were working just fine. We are perplexed about what happened.
Any ideas as to what the root cause would be? Thanks in advance!
Alphabet soup from (ISC)2, ISACA, GIAC, EC-Council, Microsoft, ITIL, Cisco, Scrum, CompTIA, AWS
· Share on FacebookShare on Twitter

Comments

  • Options
    ram1101ram1101 Member Posts: 32 ■■□□□□□□□□
    did you clear the mac and arp table ?
    · Share on FacebookShare on Twitter
  • Options
    E Double UE Double U Member Posts: 2,229 ■■■■■■■■■■
    I don't think the admin cleared arp. If he did, he didn't mention it.
    Alphabet soup from (ISC)2, ISACA, GIAC, EC-Council, Microsoft, ITIL, Cisco, Scrum, CompTIA, AWS
    · Share on FacebookShare on Twitter
  • Options
    ram1101ram1101 Member Posts: 32 ■■□□□□□□□□
    that did it for me when one of my ASAs failed and i had to replace it, like u say some services would work but other wont, remember that that active ip is mapped to a mac-address
    · Share on FacebookShare on Twitter
  • Options
    E Double UE Double U Member Posts: 2,229 ■■■■■■■■■■
    Thanks Ram!

    Did you only clear arp on that ASA or other Cisco devices as well? In our case there's another ASA, connected to a switch, etc.
    Alphabet soup from (ISC)2, ISACA, GIAC, EC-Council, Microsoft, ITIL, Cisco, Scrum, CompTIA, AWS
    · Share on FacebookShare on Twitter
Sign In or Register to comment.