Example 6: Routed Mode Failover; Primary Fwsm Configuration (Example 6 - Cisco 7604 Configuration Manual

Appendix B Sample Configurations

Example 6: Routed Mode Failover

The following configuration shows a multiple context mode FWSM with each context in routed mode in
one switch, and another FWSM in a second switch acting as a backup (see
B, and C) monitors the inside interface, and context A, which is the admin context, also monitors the
outside interface. Because the outside interface is shared among all contexts, monitoring in one context
benefits all contexts.
The primary FWSM is configured with the failover preempt command, which causes it to become the
active unit upon boot, even if the secondary unit is in the active state. The secondary FWSM is also in
multiple context mode, and has the same software release.
Figure B-6
209.165.201.3
See the following sections for the configurations for this scenario:
•
•
•

Primary FWSM Configuration (Example 6)

The following sections include the configuration for the primary FWSM:
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Example 6
Active Switch
MSFC
HSRP IP:
209.165.201.5
VLAN 200
209.165.201.2
209.165.201.4
Primary
FWSM
10.0.1.1 10.0.3.1
10.0.2.1
VLAN 201
VLAN 202
VLAN 203
Primary FWSM Configuration (Example 6), page B-19
Secondary FWSM System Configuration (Example 6), page B-22
Switch Configuration (Example 6), page B-22
Internet
VLAN 100
Standby Switch
209.165.201.7
Failover Links:
VLAN 10
Trunk:
VLAN 11
VLANs 10 and 11
10.0.1.2
Context A
Context B
Context C
Failover Example Configurations
Figure B-6). Each context (A,
MSFC
HSRP IP:
209.165.201.5
209.165.201.6
209.165.201.8
Secondary
FWSM
10.0.3.2
10.0.2.2
B-19