Cisco ASA 5505 Configuration Manual page 1227

Chapter 59 Configuring Active/Standby Failover
•
You can also specify whether or not the interface is monitored from this tab. For more information about
configuring interface monitoring, see
Configuring the Management Interface Standby Address in Transparent Firewall Mode
If you are in multiple context mode, you must perform this procedure in each context.
To configure the management interface standby address on the adaptive security appliance, follow these
steps:
Open the Configuration > Device Management > High Availability > Failover > Interfaces tab.
Step 1
A list of configured interfaces appears. Only th e Management interface shows an IP address.
For the Management interface that does not have a standby IP address, double-click the Standby IP
Step 2
Address field and do one of the following:
•
•
You can also specify whether or not the interface is monitored from this tab. For more information about
configuring interface monitoring, see
Configuring Optional Active/Standby Failover Settings
This section includes the following topics:
•
•
•
•
You can configure the optional Active/Standby failover settings when initially configuring the primary
unit in a failover pair or on the active unit in the failover pair after the initial configuration.
Disabling and Enabling Interface Monitoring
You can control which interfaces affect your failover policy by disabling the monitoring of specific
interfaces and enabling the monitoring of others. This feature enables you to exclude interfaces attached
to less critical networks from affecting your failover policy.
You can monitor up to 250 interfaces on a unit. By default, monitoring physical interfaces is enabled and
monitoring subinterfaces is disabled.
Hello messages are exchanged during every interface poll frequency time period between the security
appliance failover pair. The failover interface poll time is 3 to 15 seconds. For example, if the poll time
is set to 5 seconds, testing begins on an interface if 5 consecutive hellos are not heard on that interface
(25 seconds).
OL-20339-01
Type an IP address into the field. The address can be an IPv4 or an IPv6 address.
Click the ... button and select an IP address from the list.
Type an IP address into the field. The address can be an IPv4 or an IPv6 address.
Disabling and Enabling Interface Monitoring, page 59-9
Configuring Failover Criteria, page 59-10
Configuring the Unit and Interface Health Poll Times, page 59-11
Configuring Virtual MAC Addresses, page 59-11
Disabling and Enabling Interface Monitoring, page
Disabling and Enabling Interface Monitoring, page
Cisco ASA 5500 Series Configuration Guide using ASDM
Configuring Active/Standby Failover
59-9.
59-9.
59-9