Cisco ASA 5505 Configuration Manual page 1240

Information About Active/Active Failover
•
Failure to enter the changes on the appropriate unit for command replication to occur causes the
configurations to be out of synchronization. Those changes may be lost the next time the initial
configuration synchronization occurs.
Table 60-1
Table 60-1
Commands Replicated to the Standby Unit
all configuration commands except for the mode,
firewall, and failover lan unit commands
copy running-config startup-config
delete
mkdir
rename
rmdir
write memory
Replicated commands are not saved to the flash memory when replicated to the peer unit. They are added to the running
Failover Triggers
configuration.
In Active/Active failover, failover can be triggered at the unit level if one of the following events occurs:
•
•
•
•
Failover is triggered at the failover group level when one of the following events occurs:
•
•
You configure the failover threshold for each failover group by specifying the number or percentage of
interfaces within the failover group that must fail before the group fails. Because a failover group can
contain multiple contexts, and each context can contain multiple interfaces, it is possible for all
interfaces in a single context to fail without causing the associated failover group to fail.
See the
unit monitoring.
Cisco ASA 5500 Series Configuration Guide using ASDM
60-4
Changes entered in the admin context are replicated from the unit on which failover group 1 is in
the active state to the unit on which failover group 1 is in the standby state.
lists the commands that are and are not replicated to the standby unit.
Command Replication
The unit has a hardware failure.
The unit has a power failure.
The unit has a software failure.
You force a failover (see Forcing Failover, page
Too many monitored interfaces in the group fail.
You force a failover (see Forcing Failover, page
"Failover Health Monitoring" section on page 57-10
Chapter 60 Configuring Active/Active Failover
Commands Not Replicated to the Standby Unit
all forms of the copy command except for copy
running-config startup-config
all forms of the write command except for write
memory
debug
failover lan unit
firewall
mode
show
60-17).
60-17).
for more information about interface and
OL-20339-01