Hello,
Last day we applied new SSL Mobile Licence Extension on both 5520 "8.2.(1)11 (Primary and Failover).
Before updating. we notices that Module1 (AIP SSM) was out on secondary ASA, failover was in failed mode. We switched off 2nd ASA, removed the AIP SSM Module, reinstalled it and started again. Moduel 1 and Failover was OK.
When installing licence on 2nd FW we had a crash ... We had to reboot ASA 2nd and Afterward, also ASA Primary (even if Primary has not crashed)
Whe now a have a stange state (we are not sure failover works ...). We tried a backup on 2nd ASA (Failover), operation failed. We got the following errors:
2nd --> %ASA-1-199010: Signal 11 caught in process/fiber (rtcli async executor process)/(rtcli async executor) at address 0x0, corrective action at 0xcdfb9fe0
Prim --> %ASA-1-105005: (Primary) Lost Failover communications with mate on interface outside
Prim --> %ASA-1-105005: (Primary) Lost Failover communications with mate on interface dmzpublique
2nd --> %ASA-3-323001: Module in slot 1 experienced a control channel communication failure.
Prim --> %ASA-1-105005: (Primary) Lost Failover communications with mate on interface inside
Prim --> %ASA-1-105008: (Primary) Testing Interface outside
Prim --> %ASA-1-105008: (Primary) Testing Interface inside
2nd --> %ASA-1-709006: (Secondary) End Configuration Replication (STB)
2nd --> %ASA-1-105006: (Secondary) Link status 'Up' on interface outside
2nd -->
%ASA-1-105006: (Secondary) Link status 'Up' on interface dmzpublique
Prim -->
%ASA-1-105003: (Primary) Monitoring on interface outside waiting
Prim --> %ASA-1-105003: (Primary) Monitoring on interface inside waiting
...
...
... and finaly after 4 minutes
Prim --> %ASA-1-105004: (Primary) Monitoring on interface inside normal
Should we Ask for a RMA, if yes, for ASA, AIP SSM (module 1) or both?
Many thanks in advance for the help.
Regards.
Prim --> %ASA-1-105008: (Primary) Testing Interface dmzpublique
Prim --> %ASA-1-103001: (Primary) No response from other firewall (reason code = 1).
Prim --> %ASA-1-105009: (Primary) Testing on interface inside Status Undetermined
Prim --> %ASA-1-105009: (Primary) Testing on interface dmzpublique Status UndeterminedPrim --> %ASA-1-103001: (Primary) No response from other firewall (reason code = 4).
Prim --> %ASA-1-105009: (Primary) Testing on interface outside Status Undetermined
Prim --> %ASA-1-709004: (Primary) End Configuration Replication (ACT)
