14-23
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 14 Configuring Failover
Configuring Failover
hostname(config)#
failover interface ip
if_name ip_addr mask
standby
ip_addr
The standby IP address must be in the same subnet as the active IP address. You do not need to
identify the standby address subnet mask.
The failover link IP address and MAC address do not change at failover. The active IP address for
the failover link always stays with the primary unit, while the standby IP address stays with the
secondary unit.
c.
Enable the interface:
hostname(config)#
interface
phy_if
hostname(config-if)#
no shutdown
Step 5
(Optional) To enable Stateful Failover, configure the Stateful Failover link.
Note
Stateful Failover is not available on the ASA 5505 adaptive security appliance.
a.
Specify the interface to be used as Stateful Failover link:
hostname(config)#
failover link
if_name
phy_if
Note
If the Stateful Failover link uses the failover link or a data interface, then you only need to
supply the
if_name
argument.
The
if_name
argument assigns a logical name to the interface specified by the
phy_if
argument. The
phy_if
argument can be the physical port name, such as Ethernet1, or a previously created
subinterface, such as Ethernet0/2.3. This interface should not be used for any other purpose (except,
optionally, the failover link).
b.
Assign an active and standby IP address to the Stateful Failover link.
Note
If the Stateful Failover link uses the failover link or data interface, skip this step. You have
already defined the active and standby IP addresses for the interface.
hostname(config)#
failover interface ip
if_name ip_addr mask
standby
ip_addr
The standby IP address must be in the same subnet as the active IP address. You do not need to
identify the standby address subnet mask.
The Stateful Failover link IP address and MAC address do not change at failover unless it uses a data
interface. The active IP address always stays with the primary unit, while the standby IP address
stays with the secondary unit.
c.
Enable the interface.
Note
If the Stateful Failover link uses the failover link or data interface, skip this step. You have
already enabled the interface.
hostname(config)#
interface
phy_if
hostname(config-if)#
no shutdown
Step 6
Enable failover:
hostname(config)#
failover
Summary of Contents for 500 Series
Page 38: ...Contents xxxviii Cisco Security Appliance Command Line Configuration Guide OL 12172 03 ...
Page 45: ...P A R T 1 Getting Started and General Information ...
Page 46: ......
Page 277: ...P A R T 2 Configuring the Firewall ...
Page 278: ......
Page 561: ...P A R T 3 Configuring VPN ...
Page 562: ......
Page 891: ...P A R T 4 System Administration ...
Page 892: ......
Page 975: ...P A R T 5 Reference ...
Page 976: ......