Cisco ASA 5580

CHAPTER
60-1
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
60
Configuring Active/Active Failover
This chapter describes how to configure Active/Active failover and includes the following sections:
• Information About Active/Active Failover, page 60-1
• Licensing Requirements for Active/Active Failover, page 60-6
• Prerequisites for Active/Active Failover, page 60-6
• Guidelines and Limitations, page 60-7
• Configuring Active/Active Failover, page 60-8
• Monitoring Active/Active Failover, page 60-18
• Feature History for Active/Active Failover, page 60-19
Information About Active/Active Failover
This section describes Active/Active failover. This section includes the following topics:
• Active/Active Failover Overview, page 60-1
• Primary/Secondary Status and Active/Standby Status, page 60-2
• Device Initialization and Configuration Synchronization, page 60-3
• Command Replication, page 60-3
• Replicated commands are not saved to the flash memory when replicated to the peer unit. They are
added to the running configuration. Failover Triggers, page 60-4
• Failover Actions, page 60-5
Active/Active Failover Overview
Active/Active failover is only available to adaptive security appliances in multiple context mode. In an
Active/Active failover configuration, both adaptive security appliances can pass network traffic.
In Active/Active failover, you divide the security contexts on the adaptive security appliance into
failover groups. A failover group is simply a logical group of one or more security contexts. You can
create a maximum of two failover groups. The admin context is always a member of failover group 1.
Any unassigned security contexts are also members of failover group 1 by default.