Cisco ASA 5505 Configuration Manual page 1226

Asa 5500 series
Hide thumbs Also See for ASA 5505:
Table of Contents

Advertisement

Configuring Active/Standby Failover
Note
b.
c.
d.
e.
f.
Click Apply.
Step 11
The configuration is saved to the devices in the failover pair.
Configuring Interface Standby Addresses
Configuring standby IP address in ASDM changes depending upon the mode in which the unit is
operating. This section includes the following topics:
Configuring Interface Standby Addresses in Routed Firewall Mode
To configure a standby address for each interface on the adaptive security appliance, follow these steps:
Step 1
Open the Configuration > Device Management > High Availability > Failover > Interfaces tab.
A list of configured interfaces appears. The IP address for each interface appears in the Active IP
Address column. If configured, the standby IP address for the interface appears in the Standby IP address
column. The failover interface and Stateful failover interface do not display IP address; you cannot
change those address from this tab.
For each interface that does not have a standby IP address, double-click the Standby IP Address field and
Step 2
do one of the following:
Cisco ASA 5500 Series Configuration Guide using ASDM
59-8
Because Stateful Failover can generate a large amount of traffic, performance for both Stateful
Failover and regular traffic can suffer when you use a named interface.
Specify the IP address for the Stateful Failover interfacein the Active IP field. The IP address can
be either an IPv4 or an IPv6 address. You cannot configure both types of addresses on the failover
link interface. This field is dimmed if the LAN Failover interface or Use Named option is chosen
from the Interface drop-down list.
Specify the mask (IPv4 address) or prefix (IPv6 address) for the Stateful Failover interface in the
Subnet Mask/Prefix Length. This field is dimmed if the LAN Failover interface or Use Named
option is selected in the Interface drop-down list.
Specify the interface name used for failover communication in the Logical Name field. If you chose
the Use Named option in the Interface drop-down list, this field displays a list of named interfaces.
This field is dimmed if the LAN Failover interface is chosen from the Interface drop-down list.
Specify the IP address used by the secondary unit to communicate with the primary unit in the
Standby IP field. The IP address can be an IPv4 or an IPv6 address. This field is dimmed if the LAN
Failover interface or Use Named option is chosen from the Interface drop-down list.
(Optional) Enable HTTP replication by checking the Enable HTTP Replication check box. This
enables Stateful Failover to copy active HTTP sessions to the standby firewall. If you do not allow
HTTP replication, then HTTP connections are disconnected in the event of a failover.
Configuring Interface Standby Addresses in Routed Firewall Mode, page 59-8
Configuring the Management Interface Standby Address in Transparent Firewall Mode, page 59-9
Click the ... button and select an IP address from the list.
Chapter 59
Configuring Active/Standby Failover
OL-20339-01

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Asa 5510Asa 5540Asa 5520Asa 5550Asa 5580

Table of Contents