Enabling http replication with stateful failover, Disabling and enabling interface monitoring – Cisco ASA 5505 User Manual
Page 1319
62-13
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter 62 Configuring Active/Standby Failover
Configuring Active/Standby Failover
Enabling HTTP Replication with Stateful Failover
To allow HTTP connections to be included in the state information replication, you need to enable HTTP
replication. Because HTTP connections are typically short-lived, and because THTTP clients typically
retry failed connection attempts, HTTP connections are not automatically included in the replicated state
information.
To enable HTTP state replication when Stateful Failover is enabled, enter the following command in
global configuration mode:
Disabling and Enabling Interface Monitoring
You can control which interfaces affect your failover policy by disabling the monitoring of specific
interfaces and enabling the monitoring of others. This feature enables you to exclude interfaces attached
to less critical networks from affecting your failover policy.
You can monitor up to 250 interfaces on a unit. By default, monitoring physical interfaces is enabled and
monitoring subinterfaces is disabled.
Hello messages are exchanged during every interface poll frequency time period between the ASA
failover pair. The failover interface poll time is 3 to 15 seconds. For example, if the poll time is set to 5
seconds, testing begins on an interface if 5 consecutive hellos are not heard on that interface (25
seconds).
Monitored failover interfaces can have the following status:
•
Unknown—Initial status. This status can also mean the status cannot be determined.
•
Normal—The interface is receiving traffic.
•
Testing—Hello messages are not heard on the interface for five poll times.
•
Link Down—The interface or VLAN is administratively down.
•
No Link—The physical link for the interface is down.
•
Failed—No traffic is received on the interface, yet traffic is heard on the peer interface.
To enable or disable health monitoring for specific interfaces on units in single configuration mode, enter
one of the following commands. Alternately, for units in multiple configuration mode, you must enter
the commands within each security context.
Command
Purpose
failover replication http
Example:
hostname (config)# failover replication
http
Enables HTTP state replication.
Do one of the following: