! PermitANY — Cisco ASA Active/Standby Failover (HA)
! Configure Active/Standby High Availability failover between two Cisco ASA units — stateful failover preserves existing connections during a switchover.
! Generated: 2026-09-21
! These are EXAMPLE values. Replace with your actual config before deploying.
!
! ── Failover must be configured on BOTH units ─────────
! ── Run this config on the primary unit ──────────
!
failover
failover key F@ilover$ecret2024
failover lan unit primary
failover lan interface FAILOVER-LINK GigabitEthernet0/3
failover link FAILOVER-LINK GigabitEthernet0/3
failover interface ip FAILOVER-LINK 192.168.255.1 255.255.255.252 standby 192.168.255.2
!

failover link STATE-LINK GigabitEthernet0/2

!
! ── Interface standby IPs ────────────────────────────
interface outside
 ip address 203.0.113.1 255.255.255.0 standby 203.0.113.2
!
interface inside
 ip address 192.168.1.1 255.255.255.0 standby 192.168.1.2
!
! ── Failover polling timers (default: 15s/45s) ───────
failover polltime unit 5 holdtime 15
failover polltime interface 5 holdtime 25
!