Example 12: Lan-Based Active/Active Failover (Transparent Mode) - Cisco FirePOWER ASA 5500 series Configuration Manual

Example 12: LAN-Based Active/Active Failover (Transparent Mode)

Example 12: LAN-Based Active/Active Failover (Transparent
Mode)
The following example shows how to configure transparent mode Active/Active failover. In this example
there are 2 user contexts, named admin and ctx1.
Figure B-11 Transparent Mode Active/Active Failover Configuration
admin
Primary
Failover Group 1
Active
Active Contexts:
-admin (192.168.5.31)
Standby Contexts:
-ctx1 (192.168.1.32)
See the following sections for the configurations for this scenario:
•
•
Example 12: Primary Unit Configuration
See the following sections for the primary unit configuration:
•
•
•
Cisco Security Appliance Command Line Configuration Guide
B-30
192.168.5.1
Switch
ctx1
10.0.4.1 Failover
State
ctx1
admin
Switch
192.168.5.81
Example 9: Primary Unit Configuration
Example 9: Secondary Unit Configuration
Example 9: Primary System Configuration, page B-23
Example 9: Primary admin Context Configuration, page B-24
Example 9: Primary ctx1 Context Configuration, page B-25
Figure B-8
Internet
192.168.10.1
Switch
Outside
admin
Switch
admin
Inside
Switch
192.168.10.81
Appendix B Sample Configurations
shows the network diagram for the example.
ctx1
Secondary
Failover Group 2
Active
10.0.4.11
Active Contexts:
-ctx1 (192.168.10.31)
Standby Contexts:
-admin (102.168.5.32)
ctx1
OL-10088-01