1-9
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Active/Active Failover
Configuring Active/Active Failover
Configuring Active/Active Failover
This section describes how to configure Active/Active failover using an Ethernet failover link. When
configuring LAN-based failover, you must bootstrap the secondary device to recognize the failover link
before the secondary device can obtain the running configuration from the primary device.
This section includes the following topics:
• Task Flow for Configuring Active/Active Failover, page 1-9
• Configuring the Primary Failover Unit, page 1-9
• Configuring the Secondary Failover Unit, page 1-12
• Configuring Optional Active/Active Failover Settings, page 1-13
• Configuring Support for Asymmetrically Routed Packets, page 1-19
Task Flow for Configuring Active/Active Failover
To configure Active/Active Failover, perform the following steps:
Step 1 Configure the primary unit, as shown in the “Configuring the Primary Failover Unit” section on
page 1-9.
Step 2 Configure the secondary unit, as shown in the “Configuring the Secondary Failover Unit” section on
page 1-12.
Step 3 (Optional) Configure optional Active/Active failover settings, as shown in the “Optional Active/Active
Failover Settings” section on page 1-7.
Configuring the Primary Failover Unit
Follow the steps in this section to configure the primary unit in an Active/Active failover configuration.
These steps provide the minimum configuration needed to enable failover on the primary unit.
Restrictions
Do not configure an IP address for the Stateful Failover link if you are going to use a dedicated Stateful
Failover interface. You use the failover interface ip command to configure a dedicated Stateful Failover
interface in a later step.
Prerequisites
• Configure standby addresses for all IP addresses according to Chapter 1, “Completing Interface
Configuration (Routed Mode),” or Chapter 1, “Completing Interface Configuration
(Transparent Mode).”
• Complete this procedure in the system execution space. To change from the context to the system
execution space, enter the changeto system command.