Failover Configuration Limitations; Using Active/Standby Failover; Prerequisites; Configuring Active/Standby Failover - Cisco 7604 Configuration Manual

Chapter 14 Configuring Failover

Failover Configuration Limitations

You cannot configure failover with the following type of IP addresses:
•
•

Using Active/Standby Failover

This section provides step-by-step procedures for configuring Active/Standby failover. This section
includes the following topics:
•
•
•
See the
configurations.

Prerequisites

Before you begin, verify the following:
•
•
•
The mode command does not get replicated to the secondary unit.
Note

Configuring Active/Standby Failover

This section describes how to configure Active/Standby failover. You must configure the secondary unit
to recognize the failover link before the secondary unit can obtain the running configuration from the
primary unit.
This section includes the following topics:
•
•
Configuring the Primary Unit
Follow these steps to configure the primary unit in an Active/Standby failover configuration. These steps
provide the minimum configuration needed to enable failover on the primary unit. For multiple context
mode, all steps are performed in the system execution space unless otherwise noted.
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
IP addresses obtained through DHCP
IPv6 addresses
Prerequisites, page 14-21
Configuring Active/Standby Failover, page 14-21
Configuring Optional Active/Standby Failover Settings, page 14-24
"Failover Example Configurations" section on page B-18
Both units have the proper license. Both units in a failover pair must have the same license.
If the primary unit is in single context mode, the secondary unit must also be in single context mode
and be in the same firewall mode as the primary unit.
If the primary unit is in multiple context mode, the secondary unit must also be in multiple context
mode. You do not need to configure the firewall mode of the security contexts on the secondary unit
because the failover and state links reside in the system context. The secondary unit obtains the
security context configuration from the primary unit.
Configuring the Primary Unit, page 14-21
Configuring the Secondary Unit, page 14-23
Configuring Failover
for examples of typical failover
14-21