Home
South Pole Logbook

Search below for 'logbook_sop' for help on usage.

Sections

Search

Archives

November 2009
Sun Mon Tue Wed Thu Fri Sat
         

RSS Feed

Powered by Blosxom


Apr 28, 2008

More on dead ASA


By: TeX
Time: 2008119 2026Z
Music: Eurythmics

paw emailed me that he believes the ASA went down on April 12th, due to this
on the working ASA:
	SPSASA1# failover state

		      State          Last Failure Reason      Date/Time
	This host  -   Primary
		      Active         None
	Other host -   Secondary
		      Failed         Comm Failure             05:25:20 UTC Apr 
	12 2008

	====Configuration State===
	   Sync Done
	   Sync Done - STANDBY
	====Communication State===

He believes an upgrade was applied to the ASA on the Jan 9th date which is why the log message I saw was there.

So I went to outer to look at the logs for the 12th, and found that we are missing
logs 17-20 which are for 0408 1254 - 0413 0424. 

Looking for details in the logs again, I see this on the Jan 9th date:
Jan  9 16:32:57 defaultgw 10.1.9.254 %ASA-1-104001: (Secondary) Switching to ACTIVE - HELLO not heard from mate.
Jan  9 16:33:50 defaultgw 10.1.9.254 %ASA-1-709003: (Secondary) Beginning configuration replication: Send to mate.
Jan  9 16:34:13 defaultgw 10.1.9.254 %ASA-1-709004: (Secondary) End Configuration Replication (ACT)
Jan  9 16:38:45 defaultgw 10.1.9.254 %ASA-1-103007: (Secondary) Mate version 7.1(2) is not identical with ours 7.2(2).
Jan  9 16:42:00 defaultgw 10.1.9.254 %ASA-1-105043: (Secondary) Failover interface failed
Jan  9 16:42:12 defaultgw 10.1.9.254 %ASA-1-105042: (Secondary) Failover interface OK
Jan  9 16:42:28 defaultgw 10.1.9.254 %ASA-1-103001: (Secondary) No response from other firewall (reason code = 1).
Jan  9 16:42:38 defaultgw 10.1.9.254 %ASA-1-103001: (Secondary) No response from other firewall (reason code = 3).
Jan  9 16:43:12 defaultgw 10.1.9.254 %ASA-1-103007: (Secondary) Mate version 7.1(2) is not identical with ours 7.2(2).
Jan  9 16:43:16 defaultgw 10.1.9.254 %ASA-1-709003: (Secondary) Beginning configuration replication: Send to mate.
Jan  9 16:43:42 defaultgw 10.1.9.254 %ASA-1-709004: (Secondary) End Configuration Replication (ACT)
Jan  9 16:46:57 defaultgw 10.1.9.254 %ASA-1-105043: (Secondary) Failover interface failed
Jan  9 16:47:18 defaultgw 10.1.9.254 %ASA-1-105042: (Secondary) Failover interface OK
Jan  9 16:47:27 defaultgw 10.1.9.254 %ASA-1-103001: (Secondary) No response from other firewall (reason code = 1).
Jan  9 16:47:32 defaultgw 10.1.9.254 %ASA-1-103001: (Secondary) No response from other firewall (reason code = 3).
Jan  9 16:48:15 defaultgw 10.1.9.254 %ASA-1-103007: (Secondary) Mate version 7.2(3) is not identical with ours 7.2(2).
Jan  9 16:48:19 defaultgw 10.1.9.254 %ASA-1-709003: (Secondary) Beginning configuration replication: Send to mate.
Jan  9 16:48:37 defaultgw 10.1.9.254 %ASA-1-709004: (Secondary) End Configuration Replication (ACT)
Jan  9 16:53:18 defaultgw 10.1.9.254 %ASA-1-103007: (Secondary) Mate version 7.2(3) is not identical with ours 7.2(2).
Jan  9 16:58:14 defaultgw 10.1.9.254 %ASA-1-103007: (Secondary) Mate version 7.2(3) is not identical with ours 7.2(2).
Jan  9 16:58:58 defaultgw 10.1.9.254 %ASA-1-104001: (Primary) Switching to ACTIVE - HELLO not heard from mate.
Jan  9 16:59:14 defaultgw 10.1.9.254 %ASA-1-103001: (Primary) No response from other firewall (reason code = 3).
Jan  9 17:00:10 defaultgw 10.1.9.254 %ASA-1-709004: (Primary) End Configuration Replication (ACT)

From before the link was flapping at:
Jan  9 16:33:25 defaultgw 10.1.9.254 %ASA-4-411002: Line protocol on Interface Management0/0, changed state to down
Jan  9 16:33:35 defaultgw 10.1.9.254 %ASA-4-411001: Line protocol on Interface Management0/0, changed state to up
Jan  9 16:42:00 defaultgw 10.1.9.254 %ASA-4-411002: Line protocol on Interface Management0/0, changed state to down
Jan  9 16:42:03 defaultgw 10.1.9.254 %ASA-4-411001: Line protocol on Interface Management0/0, changed state to up
Jan  9 16:42:56 defaultgw 10.1.9.254 %ASA-4-411002: Line protocol on Interface Management0/0, changed state to down
Jan  9 16:42:56 defaultgw 10.1.9.254 %ASA-4-411001: Line protocol on Interface Management0/0, changed state to up
Jan  9 16:46:55 defaultgw 10.1.9.254 %ASA-4-411002: Line protocol on Interface Management0/0, changed state to down
Jan  9 16:46:59 defaultgw 10.1.9.254 %ASA-4-411001: Line protocol on Interface Management0/0, changed state to up
Jan  9 16:47:58 defaultgw 10.1.9.254 %ASA-4-411002: Line protocol on Interface Management0/0, changed state to down
Jan  9 16:47:58 defaultgw 10.1.9.254 %ASA-4-411001: Line protocol on Interface Management0/0, changed state to up
Jan  9 16:59:28 defaultgw 10.1.9.254 %ASA-4-411002: Line protocol on Interface Management0/0, changed state to down
Jan  9 16:59:32 defaultgw 10.1.9.254 %ASA-4-411001: Line protocol on Interface Management0/0, changed state to up


Edgar Nielsen | 28 Apr 2008 21:56 GMT | Ice Cube/SPS | | permalink