Filter
Top Products
15-30
Cisco ASDM User Guide
OL-16647-01
Chapter 15 High Availability
Field Information for the Failover Panes
For More Information
For more information about failover in general, see Understanding Failover.
Add/Edit Failover Group
Use the Add/Edit Failover Group dialog box to define failover groups for an Active/Active failover
configuration.
Fields
• Preferred Role—Specifies the unit in the failover pair, primary or secondary, on which the failover
group appears in the active state. You can have both failover groups be in the active state on a single
unit in the pair, with the other unit containing the failover groups in the standby state. However, a
more typical configuration is to assign each failover group a different role preference to make each
one active on a different unit, balancing the traffic across the devices.
• Preempt after booting with optional delay of—Checking this check box causes the unit that is the
preferred failover device for a failover group to become the active unit after rebooting. Checking
this check box also enables the Preempt after booting with optional delay of field in which you can
specify a period of time that the device should wait before becoming the active unit.
• Preempt after booting with optional delay of—Specifies the number of seconds that a unit should
wait after rebooting before taking over as the active unit for any failover groups for which it is the
preferred failover device. The range is between 0 and 1200 seconds.
• Interface Policy—Contains the fields for defining the policy for failover when monitoring detects
an interface failure. These settings override any interface policy settings on the Criteria tab.
–
Number of failed interfaces that triggers failover—When the number of failed monitored
interfaces exceeds the value you set with this command, then the security appliance fails over.
The range is between 1 and 250 failures.
–
Percentage of failed interfaces that triggers failover—When the number of failed monitored
interfaces exceeds the percentage you set with this command, then the security appliance fails
over.
• Poll time interval for monitored interfaces—The amount of time between polls among interfaces.
The range is between 1 and 15 seconds.
• Enable HTTP replication—Checking this check box enables Stateful Failover to copy active HTTP
sessions to the standby firewall. If you do not allow HTTP replication, then HTTP connections are
disconnected at failover. Disabling HTTP replication reduces the amount of traffic on the state link.
This setting overrides the HTTP replication setting on the Setup tab.
• MAC Addresses—Lists physical interfaces on the security appliance for which an active and
standby virtual MAC address has been configured.
–
Physical Interface—Displays the physical interface for which failover virtual MAC addresses
are configured.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• •—— •