Inter-Chassis Failover - Cisco 7604 Configuration Manual

Catalyst 6500 series switch and cisco 7600 series router firewall services module configuration guide using the cli

Hide thumbs Also See for 7604:

Table of Contents

Understanding Failover

Inter-Chassis Failover

To protect against switch-level failure, you can install the secondary FWSM in a separate switch. FWSM

does not coordinate failover directly with the switch, but it works harmoniously with the switch failover

operation. See the switch documentation to configure failover for the switch.

To accommodate the failover communications between FWSMs, we recommend that you configure a

trunk port between the two switches that carries the failover and state VLANs. The trunk ensures that

failover communication between the two units is subject to minimal failure risk.

For other VLANs, you must ensure that both switches have access to all firewall VLANs, and that

monitored VLANs can successfully pass hello packets between both switches.

switches carries the failover FWSM VLANs (VLANs 10 and 11).

FWSM failover is independent of the switch failover operation; however, FWSM works in any switch

failover scenario.

Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM

shows a typical intra-switch configuration.

Intra-Switch Failover

Failover VLAN 10

State VLAN 11

shows a typical switch and FWSM redundancy configuration. The trunk between the two

Configuring Failover

Show Quick Links

Table of Contents