Cisco PIX 500 Series Configuration Manual page 257

Chapter 14 Configuring Failover
Example
Figure 14-1
Figure 14-1
The two units have the following configuration (configurations show only the relevant commands). The
device labeled SecAppA in the diagram is the primary unit in the failover pair.
Example 14-1 Primary Unit System Configuration
hostname primary
interface GigabitEthernet0/1
description LAN/STATE Failover Interface
interface GigabitEthernet0/2
no shutdown
interface GigabitEthernet0/3
no shutdown
interface GigabitEthernet0/4
no shutdown
interface GigabitEthernet0/5
no shutdown
failover
failover lan unit primary
failover lan interface folink GigabitEthernet0/1
failover link folink
failover interface ip folink 10.0.4.1 255.255.255.0 standby 10.0.4.11
failover group 1
primary
failover group 2
secondary
admin-context admin
context admin
description admin
OL-12172-03
shows an example of using the asr-group command for asymmetric routing support.
ASR Example
ISP A
192.168.1.1
192.168.2.1
SecAppA
Failover/State link
Outbound Traffic
Return Traffic
ISP B
192.168.2.2
192.168.1.2
Inside
network
Cisco Security Appliance Command Line Configuration Guide
Configuring Failover
SecAppB
14-37