Cisco 7604 Configuration Manual page 276

Configuring Failover
To configure the primary unit in an Active/Standby failover pair, perform the following steps:
If you have not done so already, configure the active and standby IP addresses for each interface (routed
Step 1
mode) or for the management address (transparent mode). The standby IP address is used on the FWSM
that is currently the standby unit. It must be in the same subnet as the active IP address.
Note
hostname(config-if)# ip address active_addr netmask standby standby_addr
Note
Step 2 Designate the unit as the primary unit:
hostname(config)# failover lan unit primary
Step 3 Define the failover interface.
Specify the interface to be used as the failover interface:
a.
hostname(config)# failover lan interface if_name vlan vlan
The if_name argument assigns a name to the interface specified by the vlan argument.
Assign the active and standby IP address to the failover link:
b.
hostname(config)# failover interface ip if_name ip_addr mask standby ip_addr
The standby IP address must be in the same subnet as the active IP address. You do not need to
identify the standby address subnet mask.
The failover link IP address and MAC address do not change at failover. The active IP address for
the failover link always stays with the primary unit, while the standby IP address stays with the
secondary unit.
Step 4 (Optional) To enable Stateful Failover, configure the state link. The state link must be configured on an
unused interface.
a. Specify the interface to be used as state link:
hostname(config)# failover link if_name [vlan vlan]
Note
The if_name argument assigns a logical name to the interface specified by the vlan argument. This
interface should not be used for any other purpose except, optionally, the failover link.
b. Assign an active and standby IP address to the state link.
Note
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
14-22
Do not configure an IP address for the failover link or for the state link (if you are going to use
Stateful Failover).
In multiple context mode, you must configure the interface addresses from within each context.
Use the changeto context command to switch between contexts. The command prompt changes
to
hostname/context(config-if)#
If the state link uses the failover link, then you only need to supply the if_name argument.
If the state link uses the failover link, skip this step. You have already defined the failover
link active and standby IP addresses.
, where context is the name of the current context.
Chapter 14 Configuring Failover
OL-20748-01