Inter-Chassis Failover - Cisco 7604 Configuration Manual

Understanding Failover
Figure 14-1
Figure 14-1
Switch
Active
FWSM

Inter-Chassis Failover

To protect against switch-level failure, you can install the secondary FWSM in a separate switch. FWSM
does not coordinate failover directly with the switch, but it works harmoniously with the switch failover
operation. See the switch documentation to configure failover for the switch.
To accommodate the failover communications between FWSMs, we recommend that you configure a
trunk port between the two switches that carries the failover and state VLANs. The trunk ensures that
failover communication between the two units is subject to minimal failure risk.
For other VLANs, you must ensure that both switches have access to all firewall VLANs, and that
monitored VLANs can successfully pass hello packets between both switches.
Figure 14-2
switches carries the failover FWSM VLANs (VLANs 10 and 11).
FWSM failover is independent of the switch failover operation; however, FWSM works in any switch
Note
failover scenario.
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
14-4
shows a typical intra-switch configuration.
Intra-Switch Failover
Internet
VLAN 100
VLAN 200
Failover VLAN 10
State VLAN 11
VLAN 201
Inside
shows a typical switch and FWSM redundancy configuration. The trunk between the two
Standby
FWSM
Chapter 14 Configuring Failover
OL-20748-01