Cisco ASA Series Cli Configuration Manual page 388

Configuring Active/Active Failover
Command
Step 9
failover
Example:
hostname(config)# failover
Step 10
copy running-config startup-config
Example:
hostname(config)# copy running-config
startup-config
Configuring the Secondary Failover Unit
Follow the steps in this section to configure the secondary unit in an Active/Active failover
configuration. These steps provide the minimum configuration needed to enable failover on the
secondary unit.
Detailed Steps
To configure the secondary failover unit, perform the following steps:
Command
Step 1
failover lan interface if_name phy_if
Example:
hostname(config)# failover lan interface
folink GigabitEthernet0/3
Step 2
failover interface ip if_name [ip_address
mask standby ip_address |
ipv6_address/prefix standbyipv6_address]
Example:
hostname(config)# failover interface ip
folink 172.27.48.1 255.255.255.0 standby
172.27.48.2
hostname(config)# failover interface ip
folink 2001:a0a:b00::a0a:b70/64 standby
2001:a0a:b00::a0a:b71
Step 3
interface phy_if
no shutdown
Example:
hostname(config-if)# interface
GigabitEthernet0/3
Cisco ASA Series CLI Configuration Guide
1-12
Chapter 1
Purpose
Enables failover.
Saves the system configuration to flash memory.
Purpose
Specifies the interface to be used as the failover interface.
The if_name argument assigns a name to the interface specified by
the phy_if argument.
The phy_if argument can be the physical port name, such as
Ethernet1, or a previously created subinterface, such as
Ethernet0/2.3. On the ASASM, the phy_if specifies a VLAN. This
interface should not be used for any other purpose (except,
optionally, the Stateful Failover link).
Assigns the active and standby IP addresses to the failover link.
You can assign either an IPv4 or an IPv6 address to the interface.
You cannot assign both types of addresses to the failover link.
The standby IP address must be in the same subnet as the active
IP address. You do not need to identify the standby address
subnet mask.
The failover link IP address and MAC address do not change at
failover. The active IP address for the failover link always stays
with the primary unit, while the standby IP address stays with the
secondary unit.
Enables the interface.
Configuring Active/Active Failover