Configuring Optional Active/Standby Failover Settings - Cisco PIX 500 Series Configuration Manual

Chapter 14 Configuring Failover
hostname(config)# copy running-config startup-config

Configuring Optional Active/Standby Failover Settings

You can configure the following optional Active/Standby failover setting when you are initially
configuring failover or after failover has already been configured. Unless otherwise noted, the
commands should be entered on the active unit.
This section includes the following topics:
•
•
•
•
•
Enabling HTTP Replication with Stateful Failover
To allow HTTP connections to be included in the state information replication, you need to enable HTTP
replication. Because HTTP connections are typically short-lived, and because HTTP clients typically
retry failed connection attempts, HTTP connections are not automatically included in the replicated state
information.
Enter the following command in global configuration mode to enable HTTP state replication when
Stateful Failover is enabled:
hostname(config)# failover replication http
Disabling and Enabling Interface Monitoring
By default, monitoring physical interfaces is enabled and monitoring subinterfaces is disabled. You can
monitor up to 250 interfaces on a unit. You can control which interfaces affect your failover policy by
disabling the monitoring of specific interfaces and enabling the monitoring of others. This lets you
exclude interfaces attached to less critical networks from affecting your failover policy.
For units in multiple configuration mode, use the following commands to enable or disable health
monitoring for specific interfaces:
•
•
For units in single configuration mode, use the following commands to enable or disable health
monitoring for specific interfaces:
•
OL-12172-03
Enabling HTTP Replication with Stateful Failover, page 14-25
Disabling and Enabling Interface Monitoring, page 14-25
Configuring Interface Health Monitoring, page 14-26
Configuring Failover Criteria, page 14-26
Configuring Virtual MAC Addresses, page 14-26
To disable health monitoring for an interface, enter the following command within a context:
hostname/context(config)# no monitor-interface if_name
To enable health monitoring for an interface, enter the following command within a context:
hostname/context(config)# monitor-interface if_name
To disable health monitoring for an interface, enter the following command in global configuration
mode:
hostname(config)# no monitor-interface if_name
Cisco Security Appliance Command Line Configuration Guide
Configuring Failover
14-25