Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-10
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Active/Active Failover
Configuring Active/Active Failover
Detailed Steps
Command Purpose
Step 1
failover lan unit primary
Designates the unit as the primary unit.
Step 2
failover lan interface if_name phy_if
Example:
hostname(config)# failover lan interface
folink GigabitEthernet0/3
Specifies the interface to be used as the failover interface.
The if_name argument assigns a name to the interface specified by
the phy_if argument.
The phy_if argument can be the physical port name, such as
Ethernet1, or a previously created subinterface, such as
Ethernet0/2.3. On the ASASM, the phy_if specifies a VLAN. This
interface should not be used for any other purpose (except,
optionally, the Stateful Failover link).
Step 3
failover interface ip if_name [ip_address
mask standby ip_address |
ipv6_address/prefix standbyipv6_address]
Example:
hostname(config)# failover interface ip
folink 172.27.48.1 255.255.255.0 standby
172.27.48.2
hostname(config)# failover interface ip
folink 2001:a0a:b00::a0a:b70/64 standby
2001:a0a:b00::a0a:b71
Assigns the active and standby IP addresses to the failover link.
You can assign either an IPv4 or an IPv6 address to the interface.
You cannot assign both types of addresses to the failover link.
The standby IP address must be in the same subnet as the active
IP address. You do not need to identify the standby address
subnet mask.
The failover link IP address and MAC address do not change at
failover. The active IP address for the failover link always stays
with the primary unit, while the standby IP address stays with the
secondary unit.
Step 4
failover link if_name phy_if
Example:
hostname(config)# failover link folink
GigabitEthernet0/2
(Optional) Specifies the interface to be used as the Stateful
Failover link.
Note If the Stateful Failover link uses the failover link or a data
interface, then you only need to supply the if_name
argument.
The if_name argument assigns a logical name to the interface
specified by the phy_if argument. The phy_if argument can be the
physical port name, such as Ethernet1, or a previously created
subinterface, such as Ethernet0/2.3. On the ASASM, the phy_if
specifies a VLAN. This interface should not be used for any other
purpose (except, optionally, the failover link).

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English