Failover Configuration Limitations - Cisco FirePOWER ASA 5500 series Configuration Manual

Configuring Failover
•
•
•
•
•

Failover Configuration Limitations

You cannot configure failover with the following type of IP addresses:
•
•
•
Additionally, the following restrictions apply:
•
•
•
•
Configuring Active/Standby Failover
This section provides step-by-step procedures for configuring Active/Standby failover. This section
includes the following topics:
•
•
•
•
Prerequisites
Before you begin, verify the following:
•
•
Configuring Cable-Based Active/Standby Failover (PIX Security Appliance Only)
Follow these steps to configure Active/Standby failover using a serial cable as the failover link. The
commands in this task are entered on the primary unit in the failover pair. The primary unit is the unit
that has the end of the cable labeled "Primary" plugged into it. For devices in multiple context mode, the
commands are entered in the system execution space unless otherwise noted.
Cisco Security Appliance Command Line Configuration Guide
14-18
Configuring Active/Standby Failover, page 14-18
Configuring Active/Active Failover, page 14-26
Configuring Unit Health Monitoring, page 14-36
Configuring Failover Communication Authentication/Encryption, page 14-36
Verifying the Failover Configuration, page 14-37
IP addresses obtained through DHCP
IP addresses obtained through PPPoE
IPv6 addresses
Stateful Failover is not supported on the ASA 5505 adaptive security appliance.
Active/Active failover is not supported on the ASA 5505 adaptive security appliance.
You cannot configure failover when Easy VPN Remote is enabled on the ASA 5505 adaptive
security appliance.
VPN failover is not supported in multiple context mode.
Prerequisites, page 14-18
Configuring Cable-Based Active/Standby Failover (PIX Security Appliance Only), page 14-18
Configuring LAN-Based Active/Standby Failover, page 14-20
Configuring Optional Active/Standby Failover Settings, page 14-23
Both units have the same hardware, software configuration, and proper license.
Both units are in the same mode (single or multiple, transparent or routed).
Chapter 14 Configuring Failover
OL-10088-01