Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 390 / 2164

1-14
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Active/Active Failover
Configuring Active/Active Failover
failover occurs, or unless the failover group is configured with the preempt command. The preempt
command causes a failover group to become active on the designated unit automatically when that unit
becomes available.
To configure preemption for the specified failover group, enter the following commands:
Example
The following example configures failover group 1 with the primary unit as the higher priority and
failover group 2 with the secondary unit as the higher priority. Both failover groups are configured with
the preempt command with a wait time of 100 seconds, so the groups will automatically become active
on their preferred unit 100 seconds after the units become available.
hostname(config)# failover group 1
hostname(config-fover-group)# primary
hostname(config-fover-group)# preempt 100
hostname(config-fover-group)# exit
hostname(config)# failover group 2
hostname(config-fover-group)# secondary
hostname(config-fover-group)# preempt 100
hostname(config-fover-group)# mac-address e1 0000.a000.a011 0000.a000.a012
hostname(config-fover-group)# exit
hostname(config)#
Command Purpose
Step 1
failover group { 1 | 2 }
Example:
hostname(config)# failover group 1
Specifies the failover group.
Step 2
preempt [delay]
Example:
hostname(config-fover-group)# preempt 1200
Causes the failover group to become active on the designated unit.
You can enter an optional delay value, which specifies the number
of seconds the failover group remains active on the current unit
before automatically becoming active on the designated unit.
Valid values are from 1 to 1200.
Note
If Stateful Failover is enabled, the preemption is delayed
until the connections are replicated from the unit on
which the failover group is currently active.