Cisco PIX 500 Series Configuration Manual page 228

Understanding Failover
•
Startup configurations saved on external servers are accessible from either unit over the network and do
Note
not need to be saved separately for each unit. Alternatively, you can copy the contexts on disk from the
active unit to an external server, and then copy them to disk on the standby unit, where they become
available when the unit reloads.
Command Replication
Command replication always flows from the active unit to the standby unit. As commands are entered
on the active unit, they are sent across the failover link to the standby unit. You do not have to save the
active configuration to Flash memory to replicate the commands.
The following commands are replicated to the standby unit:
•
•
•
•
•
•
•
The following commands are not replicated to the standby unit:
•
•
•
•
•
•
•
•
Note Changes made on the standby unit are not replicated to the active unit. If you enter a command on the
standby unit, the security appliance displays the message
Replication is NOT performed from Standby unit to Active unit. Configurations are no
longer synchronized.
the configuration.
If you enter the write standby command on the active unit, the standby unit clears its running
configuration (except for the failover commands used to communicate with the active unit), and the
active unit sends its entire configuration to the standby unit.
Cisco Security Appliance Command Line Configuration Guide
14-8
For multiple context mode, enter the write memory all command on the active unit from the system
execution space. The command is replicated to the standby unit, which proceeds to write its
configuration to Flash memory. Using the all keyword with this command causes the system and all
context configurations to be saved.
all configuration commands except for the mode, firewall, and failover lan unit commands
copy running-config startup-config
delete
mkdir
rename
rmdir
write memory
all forms of the copy command except for copy running-config startup-config
all forms of the write command except for write memory
crypto ca server and associated sub-commands
debug
failover lan unit
firewall
mode
show
This message displays even when you enter many commands that do not affect
Chapter 14
**** WARNING **** Configuration
Configuring Failover
OL-12172-03