Cisco ASA 5505 Configuration Manual page 1250

Configuring Active/Active Failover
Fields
Preferred Role—Specifies the unit in the failover pair, primary or secondary, on which the failover
•
group appears in the active state. You can have both failover groups be in the active state on a single
unit in the pair, with the other unit containing the failover groups in the standby state. However, a
more typical configuration is to assign each failover group a different role preference to make each
one active on a different unit, balancing the traffic across the devices.
Preempt after booting with optional delay of—Checking this check box causes the unit that is the
•
preferred failover device for a failover group to become the active unit after rebooting. Checking
this check box also enables the Preempt after booting with optional delay of field in which you can
specify a period of time that the device should wait before becoming the active unit.
• Preempt after booting with optional delay of—Specifies the number of seconds that a unit should
wait after rebooting before taking over as the active unit for any failover groups for which it is the
preferred failover device. The range is between 0 and 1200 seconds.
Interface Policy—Contains the fields for defining the policy for failover when monitoring detects
•
an interface failure. These settings override any interface policy settings on the Criteria tab.
• Poll time interval for monitored interfaces—The amount of time between polls among interfaces.
The range is between 1 and 15 seconds.
Enable HTTP replication—Checking this check box enables Stateful Failover to copy active HTTP
•
sessions to the standby firewall. If you do not allow HTTP replication, then HTTP connections are
disconnected at failover. Disabling HTTP replication reduces the amount of traffic on the state link.
This setting overrides the HTTP replication setting on the Setup tab.
MAC Addresses—Lists physical interfaces on the adaptive security appliance for which an active
•
and standby virtual MAC address has been configured.
• Add—Displays the Add Interface MAC Address dialog box. You cannot assign virtual MAC
addresses to the LAN failover and Stateful Failover interfaces. See
Address
Edit—Displays the Edit Interface MAC Address dialog box for the selected interface. See
•
Interface MAC Address
Delete—Removes the currently selected interface from the MAC addresses table. There is no
•
confirmation or undo.
Cisco ASA 5500 Series Configuration Guide using ASDM
60-14
Number of failed interfaces that triggers failover—When the number of failed monitored
–
interfaces exceeds the value you set with this command, then the adaptive security appliance
fails over. The range is between 1 and 250 failures.
Percentage of failed interfaces that triggers failover—When the number of failed monitored
–
interfaces exceeds the percentage you set with this command, then the adaptive security
appliance fails over.
Physical Interface—Displays the physical interface for which failover virtual MAC addresses
–
are configured.
Active MAC Address—Displays the MAC address for the interface and failover group on the
–
unit where the failover group is active.
– Standby MAC Address—Displays the MAC address for the interface and failover group on the
unit where the failover group is in the standby state.
for more information.
for more information.
Chapter 60 Configuring Active/Active Failover
Add/Edit Interface MAC
Add/Edit
OL-20339-01