Cisco ASA 5505 - Manual (Page 1333)

63-9
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter 63 Configuring Active/Active Failover
Configuring Active/Active Failover
Restrictions
Do not configure an IP address for the Stateful Failover link if you are going to use a dedicated Stateful
Failover interface. You use the failover interface ip command to configure a dedicated Stateful Failover
interface in a later step.
Prerequisites
• Configure standby addresses for all IP addresses according to Chapter 8, “Completing Interface
Configuration (Routed Mode),” or Chapter 9, “Completing Interface Configuration
(Transparent Mode).”
• Complete this procedure in the system execution space. To change from the context to the system
execution space, enter the changeto system command.
Detailed Steps
Command Purpose
Step 1 failover lan unit primary Designates the unit as the primary unit.
Step 2 failover lan interface if_name phy_if
Example:
hostname(config)# failover lan interface
folink GigabitEthernet0/3
Specifies the interface to be used as the failover interface.
The if_name argument assigns a name to the interface specified by
the phy_if argument.
The phy_if argument can be the physical port name, such as
Ethernet1, or a previously created subinterface, such as
Ethernet0/2.3. This interface should not be used for any other
purpose (except, optionally, the Stateful Failover link).
Step 3 failover interface ip if_name [ip_address
mask standby ip_address |
ipv6_address/prefix standbyipv6_address]
Example:
hostname(config)# failover interface ip
folink 172.27.48.1 255.255.255.0 standby
172.27.48.2
hostname(config)# failover interface ip
folink 2001:a0a:b00::a0a:b70/64 standby
2001:a0a:b00::a0a:b71
Assigns the active and standby IP addresses to the failover link.
You can assign either an IPv4 or an IPv6 address to the interface.
You cannot assign both types of addresses to the failover link.
The standby IP address must be in the same subnet as the active
IP address. You do not need to identify the standby address
subnet mask.
The failover link IP address and MAC address do not change at
failover. The active IP address for the failover link always stays
with the primary unit, while the standby IP address stays with the
secondary unit.
Step 4 failover link if_name phy_if
Example:
hostname(config)# failover link folink
GigabitEthernet0/2
(Optional) Specifies the interface to be used as the Stateful
Failover link.
Note If the Stateful Failover link uses the failover link or a data
interface, then you only need to supply the if_name
argument.
The if_name argument assigns a logical name to the interface
specified by the phy_if argument. The phy_if argument can be the
physical port name, such as Ethernet1, or a previously created
subinterface, such as Ethernet0/2.3. This interface should not be
used for any other purpose (except, optionally, the failover link).