1-10
Cisco ASA Series CLI Configuration Guide
 
Chapter 1      Configuring Active/Active Failover
  Configuring Active/Active Failover
Detailed Steps
Command Purpose
Step 1
failover lan unit primary
Designates the unit as the primary unit.
Step 2
failover lan interface if_name phy_if
Example:
hostname(config)# failover lan interface 
folink GigabitEthernet0/3
Specifies the interface to be used as the failover interface.
The if_name argument assigns a name to the interface specified by 
the phy_if argument. 
The phy_if argument can be the physical port name, such as 
Ethernet1, or a previously created subinterface, such as 
Ethernet0/2.3. On the ASASM, the phy_if specifies a VLAN. This 
interface should not be used for any other purpose (except, 
optionally, the Stateful Failover link).
Step 3
failover interface ip if_name [ip_address 
mask standby ip_address | 
ipv6_address/prefix standbyipv6_address]
Example:
hostname(config)# failover interface ip 
folink 172.27.48.1 255.255.255.0 standby 
172.27.48.2
hostname(config)# failover interface ip 
folink 2001:a0a:b00::a0a:b70/64 standby 
2001:a0a:b00::a0a:b71 
Assigns the active and standby IP addresses to the failover link. 
You can assign either an IPv4 or an IPv6 address to the interface. 
You cannot assign both types of addresses to the failover link.
The standby IP address must be in the same subnet as the active 
IP address. You do not need to identify the standby address 
subnet mask. 
The failover link IP address and MAC address do not change at 
failover. The active IP address for the failover link always stays 
with the primary unit, while the standby IP address stays with the 
secondary unit.
Step 4
failover link if_name phy_if
Example:
hostname(config)# failover link folink 
GigabitEthernet0/2
(Optional) Specifies the interface to be used as the Stateful 
Failover link.
Note If the Stateful Failover link uses the failover link or a data 
interface, then you only need to supply the if_name 
argument.
The if_name argument assigns a logical name to the interface 
specified by the phy_if argument. The phy_if argument can be the 
physical port name, such as Ethernet1, or a previously created 
subinterface, such as Ethernet0/2.3. On the ASASM, the phy_if 
specifies a VLAN. This interface should not be used for any other 
purpose (except, optionally, the failover link).