EasyManuals Logo
Home>Cisco>Firewall>FirePOWER ASA 5500 series

Cisco FirePOWER ASA 5500 series User Manual

Cisco FirePOWER ASA 5500 series
989 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Page #220 background imageLoading...
Page #220 background image
14-18
Cisco Security Appliance Command Line Configuration Guide
OL-10088-01
Chapter 14 Configuring Failover
Configuring Failover
Configuring Active/Standby Failover, page 14-18
Configuring Active/Active Failover, page 14-26
Configuring Unit Health Monitoring, page 14-36
Configuring Failover Communication Authentication/Encryption, page 14-36
Verifying the Failover Configuration, page 14-37
Failover Configuration Limitations
You cannot configure failover with the following type of IP addresses:
IP addresses obtained through DHCP
IP addresses obtained through PPPoE
IPv6 addresses
Additionally, the following restrictions apply:
Stateful Failover is not supported on the ASA 5505 adaptive security appliance.
Active/Active failover is not supported on the ASA 5505 adaptive security appliance.
You cannot configure failover when Easy VPN Remote is enabled on the ASA 5505 adaptive
security appliance.
VPN failover is not supported in multiple context mode.
Configuring Active/Standby Failover
This section provides step-by-step procedures for configuring Active/Standby failover. This section
includes the following topics:
Prerequisites, page 14-18
Configuring Cable-Based Active/Standby Failover (PIX Security Appliance Only), page 14-18
Configuring LAN-Based Active/Standby Failover, page 14-20
Configuring Optional Active/Standby Failover Settings, page 14-23
Prerequisites
Before you begin, verify the following:
Both units have the same hardware, software configuration, and proper license.
Both units are in the same mode (single or multiple, transparent or routed).
Configuring Cable-Based Active/Standby Failover (PIX Security Appliance Only)
Follow these steps to configure Active/Standby failover using a serial cable as the failover link. The
commands in this task are entered on the primary unit in the failover pair. The primary unit is the unit
that has the end of the cable labeled “Primary” plugged into it. For devices in multiple context mode, the
commands are entered in the system execution space unless otherwise noted.

Table of Contents

Questions and Answers:

Question and Answer IconNeed help?

Do you have a question about the Cisco FirePOWER ASA 5500 series and is the answer not in the manual?

Cisco FirePOWER ASA 5500 series Specifications

General IconGeneral
BrandCisco
ModelFirePOWER ASA 5500 series
CategoryFirewall
LanguageEnglish

Related product manuals