Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 387 / 2164

1-11
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Active/Active Failover
Configuring Active/Active Failover
Step 5
failover interface ip if_name [ ip_address
mask standby ip_address |
ipv6_address / prefix standby ipv6_address ]
Example:
hostname(config)# failover interface ip
folink 172.27.48.1 255.255.255.0 standby
172.27.48.2
hostname(config)# failover interface ip
statelink 2001:a1a:b00::a0a:a70/64 standby
2001:a1a:b00::a0a:a71
(Optional) Assigns an active and standby IP address to the
Stateful Failover link. You can assign either an IPv4 or an IPv6
address to the interface. You cannot assign both types of addresses
to the Stateful Failover link.
Note
If the Stateful Failover link uses the failover link or data
interface, skip this step. You have already defined the
active and standby IP addresses for the interface.
The standby IP address must be in the same subnet as the active
IP address. You do not need to identify the standby address
subnet mask.
The Stateful Failover link IP address and MAC address do not
change at failover unless it uses a data interface. The active IP
address always stays with the primary unit, while the standby IP
address stays with the secondary unit.
Step 6
interface phy_if
no shutdown
Example:
hostname(config)# interface
GigabitEthernet 0/3
hostname(config-if)# no shutdown
Enables the interface.
Note
If the Stateful Failover link uses the failover link or
regular data interface, skip this step. You have already
enabled the interface.
Step 7
failover group { 1 | 2 }
primary | secondary
Example:
hostname(config)# failover group 1
hostname(config-fover-group)# primary
hostname(config-fover-group)# exit
hostname(config)# failover group 2
hostname(config-fover-group)# secondary
hostname(config-fover-group)# exit
Configures the failover groups.
You can have only two failover groups. The failover group
command creates the specified failover group if it does not exist
and enters the failover group configuration mode.
For each failover group, specify whether the failover group has
primary or secondary preference using the
primary or secondary
commands. You can assign the same preference to both failover
groups. For traffic sharing configurations, you should assign each
failover group a different unit preference.
The exit command restores global configuration mode.
The example assigns failover group 1 as the primary preference
and failover group 2 as the secondary preference.
Step 8
context name
join-failover-group {1 | 2}
Example:
hostname(config)# context Eng
hostname(config-context)#
join-failover-group 1
hostname(config-context) exit
Assigns each user context to a failover group (in context
configuration mode).
Any unassigned contexts are automatically assigned to failover
group 1. The admin context is always a member of failover group
1.
Command Purpose