Cisco Systems OL-16647-01 Network Router User Manual


  Open as PDF
of 1230
 
15-27
Cisco ASDM User Guide
OL-16647-01
Chapter 15 High Availability
Field Information for the Failover Panes
Only unconfigured interfaces or subinterfaces that have not been assigned to a context are
displayed in this list and can be selected as the LAN Failover interface. Once you specify an
interface as the LAN Failover interface, you cannot edit that interface in the Configuration >
Interfaces pane or assign that interface to a context.
Active IP—Specifies the IP address for the failover interface on the active unit.
Subnet Mask—Specifies the mask for the failover interface on the active unit.
Logical Name—Specifies the logical name for the failover interface.
Standby IP—Specifies the IP address of the standby unit.
Preferred Role—Specifies whether the preferred role for this security appliance is as the
primary or secondary unit in a LAN failover.
State Failover—Contains the fields for configuring Stateful Failover.
Interface—Specifies the interface used for failover communication. You can choose an
unconfigured interface or subinterfacem or the LAN Failover interface.
If you choose the LAN Failover interface, the interface needs enough capacity to handle both
the LAN Failover and Stateful Failover traffic. Also, you do not need to specify the Active IP,
Subnet Mask, Logical Name, and Standby IP values; the values specified for the LAN Failover
interface are used.
Note We recommend that you use two separate, dedicated interfaces for the LAN Failover
interface and the Stateful Failover interface.
Active IP—Specifies the IP address for the Stateful Failover interface on the active unit.
Subnet Mask—Specifies the mask for the Stateful Failover interface on the active unit.
Logical Name—Specifies the logical name for the Stateful Failover interface.
Standby IP—Specifies the IP address of the standby unit.
Enable HTTP replication—Checking this check box enables Stateful Failover to copy active
HTTP sessions to the standby firewall. If you do not allow HTTP replication, then HTTP
connections are disconnected at failover. Disabling HTTP replication reduces the amount of
traffic on the state link.
Modes
The following table shows the modes in which this feature is available:
For More Information
For more information about failover in general, see Understanding Failover.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• •——