Filter
Top Products
15-21
Cisco ASDM User Guide
OL-16647-01
Chapter 15 High Availability
Field Information for the Failover Panes
Modes
The following table shows the modes in which this feature is available:
For More Information
For more information about failover in general, see Understanding Failover.
Failover: MAC Addresses
The MAC Addresses tab lets you configure the virtual MAC addresses for the interfaces in an
Active/Standby failover pair.
Note This tab is not available on the ASA 5505 platform.
In Active/Standby failover, the MAC addresses for the primary unit are always associated with the active
IP addresses. If the secondary unit boots first and becomes active, it uses the burned-in MAC address for
its interfaces. When the primary unit comes online, the secondary unit obtains the MAC addresses from
the primary unit. The change can disrupt network traffic.
You can configure virtual MAC addresses for each interface to ensure that the secondary unit uses the
correct MAC addresses when it is the active unit, even if it comes online before the primary unit. If you
do not specify virtual MAC addresses, then the failover pair uses the burned-in NIC address as the MAC
address.
Note You cannot configure a virtual MAC address for the failover or state links. The MAC and IP addresses
for those links do not change during failover.
Fields
• MAC Addresses—Lists physical interfaces on the security appliance for which an active and
standby virtual MAC address has been configured.
–
Physical Interface column—Identifies the physical interface for which failover virtual MAC
addresses are configured.
–
Active MAC Address column—Identifies the MAC address of the active security appliance
(usually primary).
–
Standby MAC Address column—Identifies the MAC address of the standby security appliance
(usually secondary).
• Add—Displays the Add Interface MAC Address dialog box. You cannot assign virtual MAC
addresses to the LAN failover and Stateful Failover interfaces. See Add/Edit Interface MAC
Address for more information.
• Edit—Displays the Edit Interface MAC Address dialog box for the selected interface. See Add/Edit
Interface MAC Address for more information.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• • •——