Cisco FirePOWER ASA 5500 series Configuration Manual page 210

Understanding Failover
Changes made on the standby unit are not replicated to the active unit. If you enter a command on the
Note
standby unit, the security appliance displays the message
Replication is NOT performed from Standby unit to Active unit. Configurations are no
longer synchronized.
the configuration.
If you enter the write standby command on the active unit, the standby unit clears its running
configuration (except for the failover commands used to communicate with the active unit), and the
active unit sends its entire configuration to the standby unit.
For multiple context mode, when you enter the write standby command in the system execution space,
all contexts are replicated. If you enter the write standby command within a context, the command
replicates only the context configuration.
Replicated commands are stored in the running configuration. To save the replicated commands to the
Flash memory on the standby unit:
•
•
Failover Triggers
The unit can fail if one of the following events occurs:
•
•
•
•
Failover Actions
In Active/Standby failover, failover occurs on a unit basis. Even on systems running in multiple context
mode, you cannot fail over individual or groups of contexts.
Table 14-1
failover policy (failover or no failover), the action taken by the active unit, the action taken by the
standby unit, and any special notes about the failover condition and actions.
Cisco Security Appliance Command Line Configuration Guide
14-8
This message displays even when you enter many commands that do not affect
For single context mode, enter the copy running-config startup-config command on the active unit.
The command is replicated to the standby unit, which proceeds to write its configuration to Flash
memory.
For multiple context mode, enter the copy running-config startup-config command on the active
unit from the system execution space and within each context on disk. The command is replicated
to the standby unit, which proceeds to write its configuration to Flash memory. Contexts with startup
configurations on external servers are accessible from either unit over the network and do not need
to be saved separately for each unit. Alternatively, you can copy the contexts on disk from the active
unit to an external server, and then copy them to disk on the standby unit.
The unit has a hardware failure or a power failure.
The unit has a software failure.
Too many monitored interfaces fail.
The no failover active command is entered on the active unit or the failover active command is
entered on the standby unit.
shows the failover action for each failure event. For each failure event, the table shows the
Chapter 14
**** WARNING **** Configuration
Configuring Failover
OL-10088-01