Cisco ASA Series Cli Configuration Manual page 344

Active/Active and Active/Standby Failover
Figure 1-7
Primary
Active/Active and Active/Standby Failover
Two types of failover configurations are supported by the ASA: Active/Standby and Active/Active.
In Active/Standby failover, one unit is the active unit. It passes traffic. The standby unit does not actively
pass traffic. When a failover occurs, the active unit fails over to the standby unit, which then becomes
active. You can use Active/Standby failover for ASAs in single or multiple context mode, although it is
most commonly used for ASAs in single context mode.
Active/Active failover is only available to ASAs in multiple context mode. In an Active/Active failover
configuration, both ASAs can pass network traffic. In Active/Active failover, you divide the security
contexts on the ASA into failover groups. A failover group is simply a logical group of one or more
security contexts. Each group is assigned to be active on a specific ASA in the failover pair. When a
failover occurs, it occurs at the failover group level.
For more detailed information about each type of failover, refer the following information:
•
•
Determining Which Type of Failover to Use
The type of failover you choose depends upon your ASA configuration and how you plan to use the
ASAs.
If you are running the ASA in single mode, then you can use only Active/Standby failover. Active/Active
failover is only available to ASAs running in multiple context mode.
Cisco ASA Series CLI Configuration Guide
1-8
Connecting with Inter-switch Links
outside
Active redundant
failover link
Standby redundant
failover link
inside
Chapter 1, "Configuring Active/Standby Failover"
Chapter 1, "Configuring Active/Active Failover"
Switch 1 Switch 2
outside
ISL
Switch 3 Switch 4
Active redundant
ISL
Switch 5 Switch 6
Standby redundant
ISL
Switch 7 Switch 8
inside
ISL
Chapter 1 Information About Failover
Secondary
failover link
failover link