Cisco PIX 500 Series Configuration Manual page 243

Chapter 14 Configuring Failover
hostname(config)# failover interface ip if_name ip_addr mask standby ip_addr
The standby IP address must be in the same subnet as the active IP address. You do not need to
identify the standby address subnet mask.
The failover link IP address and MAC address do not change at failover. The active IP address for
the failover link always stays with the primary unit, while the standby IP address stays with the
secondary unit.
Enable the interface:
c.
hostname(config)# interface phy_if
hostname(config-if)# no shutdown
Step 5 (Optional) To enable Stateful Failover, configure the Stateful Failover link.
Note
Specify the interface to be used as Stateful Failover link:
a.
hostname(config)# failover link if_name phy_if
Note
The if_name argument assigns a logical name to the interface specified by the phy_if argument. The
phy_if argument can be the physical port name, such as Ethernet1, or a previously created
subinterface, such as Ethernet0/2.3. This interface should not be used for any other purpose (except,
optionally, the failover link).
Assign an active and standby IP address to the Stateful Failover link.
b.
Note
hostname(config)# failover interface ip if_name ip_addr mask standby ip_addr
The standby IP address must be in the same subnet as the active IP address. You do not need to
identify the standby address subnet mask.
The Stateful Failover link IP address and MAC address do not change at failover unless it uses a data
interface. The active IP address always stays with the primary unit, while the standby IP address
stays with the secondary unit.
Enable the interface.
c.
Note
hostname(config)# interface phy_if
hostname(config-if)# no shutdown
Step 6 Enable failover:
hostname(config)# failover
OL-12172-03
Stateful Failover is not available on the ASA 5505 adaptive security appliance.
If the Stateful Failover link uses the failover link or a data interface, then you only need to
supply the if_name argument.
If the Stateful Failover link uses the failover link or data interface, skip this step. You have
already defined the active and standby IP addresses for the interface.
If the Stateful Failover link uses the failover link or data interface, skip this step. You have
already enabled the interface.
Cisco Security Appliance Command Line Configuration Guide
Configuring Failover
14-23