address. To receive packets from both units in a failover pair, standby IP addresses need to be configured
on all interfaces.
Note
Do not configure an IP address for the Stateful Failover link if you are going to use a dedicated
Stateful Failover interface. You use the
failover interface ip
command to configure a dedicated
Stateful Failover interface in a later step.
hostname(config-if)#
ip address
active_addr netmask
standby
standby_addr
Note
In multiple context mode, you must configure the interface addresses from within each context.
Use the
changeto context
command to switch between contexts. The command prompt changes
to
hostname/
context
(config-if)#
, where
context
is the name of the current context.
Step 4(Optional) To enable Stateful Failover, configure the Stateful Failover link. a.Specify the interface to be used as Stateful Failover link.
b.Assign an active and standby IP address to the Stateful Failover link.
The standby IP address must be in the same subnet as the active IP address. You do not need to
identify the standby IP address subnet mask.
The Stateful Failover link IP address and MAC address do not change at failover except for when
Stateful Failover uses a regular data interface. The active IP address always stays with the primary
unit, while the standby IP address stays with the secondary unit.
c.
Enable the interface.
hostname(config)#
interface
phy_if
hostname(config-if)#
no shutdown
Step 5
Configure the failover groups. You can have at most two failover groups. The
failover group
command
creates the specified failover group if it does not exist and enters the failover group configuration mode.
For each failover group, you need to specify whether the failover group has primary or secondary
preference using the
primary
or
secondary
command. You can assign the same preference to both
failover groups. For load balancing configurations, you should assign each failover group a different unit
preference.

11-26
Cisco Security Appliance Command Line Configuration Guide
OL-8629-01
Chapter 11
Configuring Failover
Configuring Failover
The following example assigns failover group 1 a primary preference and failover group 2 a secondary
preference:
hostname(config)#
failover group 1
hostname(config-fover-group)#
primary
hostname(config-fover-group)#
exit
hostname(config)#
failover group 2
hostname(config-fover-group)#
secondary
hostname(config-fover-group)#
exit
Step 6
Assign each user context to a failover group using the
join-failover-group
command in context
configuration mode.


You've reached the end of your free preview.
Want to read all 56 pages?
- Fall '19
- IP address, active unit