两台ASA5550(系统版本一样型号一样,什么都一样)做的A/S failover,心跳端口UP都能ping通,上联和下连端口全都up所有功能都正常,下面的服务器也可以通过ASA访问公网,NAT都正常,但是现在主防火墙登陆不了登陆提示:the remote system refused the connection.(服务器拒绝连接)。但是我能连接到备用ASA上。备用设备的状态如下:
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 250
Inside Hosts : Unlimited
Failover : Active/Active
Failover On
Failover unit Secondary
Failover LAN Interface: voole GigabitEthernet1/1 (up)
Unit Poll frequency 1 seconds, holdtime 15 seconds
Interface Poll frequency 5 seconds, holdtime 25 seconds
Interface Policy 1
Monitored Interfaces 3 of 256 maximum
Version: Ours 8.2(5), Mate 8.2(5)
Last Failover at: 05:39:11 UTC Apr 5 2016
This host: Secondary - Failed
Active time: 13 (sec)
slot 0: ASA5550 hw/sw rev (2.0/8.2(5)) status (Up Sys)
Interface outside (222.x.x.1): Normal
Interface inside2 (0.0.0.0): No Link (Waiting)
Interface inside1 (172.21.1.2): Normal
slot 1: ASA-SSM-4GE-INC hw/sw rev (1.0/1.0(0)10) status (Up)
Other host: Primary - Active
Active time: 20085891 (sec)
slot 0: ASA5550 hw/sw rev (2.0/8.2(5)) status (Up Sys)
Interface outside (222.x.x.2): Normal
Interface inside2 (172.16.2.1): Normal (Waiting)
Interface inside1 (172.21.1.1): Normal
slot 1: ASA-SSM-4GE-INC hw/sw rev (1.0/1.0(0)10) status (Up)
请问为什么show ver 看到的failover状态是A/A的? 是心跳线有问题了么? 配置绝对没有问题,已经正常运行很久了,按照网上给的实例做的。今天突然主设备登陆不了了,只能登陆到备上看,求大神给判断一下是什么问题,在线等