Cisco 6500 - Catalyst Series 10 Gigabit EN Interface Module Expansion, Configuration Manual, Page: 651 / 742

B-27
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Appendix B Sample Configurations
Failover Example Configurations
Example 8: Active/Active Failover with Asymmetric Routing Support
The following example shows how to configure Active/Active failover. In this example there are three
contexts: Context A (the admin context), Context B, and Context C.
•
The failover groups are configured with the preempt command.
• The admin context only has one interface.
Figure B-8 shows the network diagram for the example.
Figure B-8 Active/Active Failover Configuration
Prerequisites
Both units must be in multiple context mode. Use the mode multiple command to switch the primary
and secondary FWSMs to multiple context mode. You must enter the mode multiple command on both
the primary and secondary unit to change modes; the mode multiple command is not replicated to the
secondary unit even in existing Active/Standby failover configurations.
Both FWSMs must be licensed for the same number of security contexts.
Primary FWSM Configuration (Example 8)
The following sections include the configuration for the primary FWSM:
•
System Context Configuration (Primary FWSM—Example 8), page B-28
• Context A Configuration (Primary FWSM—Example 8), page B-28
•
Context B Configuration (Primary FWSM—Example 8), page B-29
•
Context C Configuration (Primary FWSM—Example 8), page B-29
VLAN 201
VLAN 4
Context C
Context B
Context A
VLAN 5
VLAN 6
148388
Primary
Failover Group 1
Active
Active Contexts
-Context A
-Context B
Internet
VLAN 202
10.0.9.2
10.0.9.1
10.0.5.1
10.0.5.2
Trunk:
VLANs 10 and 11
192.168.1.1 192.168.1.2
192.168.2.1 192.168.2.2
Secondary
Failover Group 2
Active
Active Contexts
-Context C
10.0.3.1 10.0.2.1
10.0.1.2
10.0.3.2 10.0.2.2 10.0.1.1