Cisco 7604 Configuration Manual page 644

Failover Example Configurations
•
•
•
•
System Configuration (Primary Unit—Example 6)
You must first enable multiple context mode using the mode multiple command. Then enter the
activation key to allow more than two contexts using the activation-key command. The mode and the
activation key are not stored in the configuration file, even though they do endure reboots. If you view
the configuration on the FWSM using the write terminal, show startup, or show running commands,
the mode displays after the FWSM Release (blank means single mode, "<system>" means you are in
multiple mode in the system configuration, and <context> means you are in multiple mode in a context).
hostname primary
enable password farscape
password crichton
!The vlan 10 and 11 interfaces are created when you enter the failover lan interface and
failover link commands.
interface vlan 10
interface vlan 11
interface vlan 200
interface vlan 201
interface vlan 202
interface vlan 203
failover lan interface faillink vlan 10
failover link statelink vlan 11
failover lan unit primary
failover preempt 5
failover interface ip faillink 192.168.253.1 255.255.255.252 standby 192.168.253.2
failover interface ip statelink 192.168.253.5 255.255.255.252 standby 192.168.253.6
failover interface-policy 50%
failover replication http
failover
admin-context contexta
context contexta
context contextb
context contextc
Context A Configuration (Primary Unit—Example 6)
To change to a context configuration, enter the changeto context name command. To change back to the
system, enter changeto system.
interface vlan 200
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
B-20
System Configuration (Primary Unit—Example 6), page B-20
Context A Configuration (Primary Unit—Example 6), page B-20
Context B Configuration (Primary Unit—Example 6), page B-21
Context C Configuration (Primary Unit—Example 6), page B-21
description LAN Failover interface
description STATE Failover interface
allocate-interface vlan200
allocate-interface vlan201
config-url disk://contexta.cfg
allocate-interface vlan200
allocate-interface vlan202
config-url ftp://admin:passw0rd@10.0.3.16/contextb.cfg
allocate-interface vlan200
allocate-interface vlan203
config-url ftp://admin:passw0rd@10.0.3.16/contextc.cfg
nameif outside
security-level 0
ip address 209.165.201.2 255.255.255.224 standby 209.165.201.6
Appendix B Sample Configurations
OL-20748-01