Configuring Failover
Using Active/Active Failover
This section describes how to configure Active/Active failover.
This section includes the following topics:
•
•
•
See the
configurations.
Prerequisites
Before you begin, verify the following:
•
•
The mode command does not get replicated to the secondary unit.
Note
Configuring Active/Active Failover
This section describes how to configure Active/Active failover. You must configure the secondary unit
to recognize the failover link before the secondary unit can obtain the running configuration from the
primary unit.
This section includes the following topics:
•
•
Configure the Primary Unit
To configure the primary unit in an Active/Active failover configuration, perform the following steps:
If you have not done so already, configure the active and standby IP addresses for each interface (routed
Step 1
mode) or for the management address (transparent mode). The standby IP address is used on the FWSM
that is currently the standby unit. It must be in the same subnet as the active IP address.
Note
hostname(config-if)# ip address active_addr netmask standby standby_addr
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
14-26
Prerequisites, page 14-26
Configuring Active/Active Failover, page 14-26
Configuring Optional Active/Active Failover Settings, page 14-29
"Failover Example Configurations" section on page B-18
Both units have the proper license.
Both units are in multiple context mode. You do not need configure the firewall mode of the security
contexts on the secondary unit because the failover and state links reside in the system context. The
secondary unit obtains the security context configuration from the primary unit.
Configure the Primary Unit, page 14-26
Configure the Secondary Unit, page 14-28
Do not configure an IP address for the failover link or for the state link (if you are going to use
Stateful Failover).
Chapter 14
Configuring Failover
for examples of typical failover
OL-20748-01