Filter
Top Products
49-14
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 49 Configuring Failover
Failover Policies
LAN Failover
VLAN Enter the numeric ID of the VLAN interface you are using for the
failover link; for example, 11. This list is not automatically populated
with VLAN IDs—you must highlight “Not Selected” and type the
desired VLAN ID number; press your keyboard’s Tab key to activate
the related fields.
When configured for failover, the interface is directly connected to the
standby device.
Logical Name Enter a logical name for the failover VLAN interface.
Active IP Address Specify the active IP address for this interface.
Standby IP Address Specify a standby IP address for this interface.
To receive packets from both units in a failover pair, standby IP
addresses need to be configured on all interfaces. The Standby IP
address is used on the security appliance that is currently the standby
unit, and it must be in the same subnet as the active IP address.
Subnet Mask Enter the Subnet Netmask for the Active and Standby IP addresses.
Bootstrap button Click to display the Bootstrap Configuration for LAN Failover dialog
box. See Bootstrap Configuration for LAN Failover Dialog Box,
page 49-26 for more information.
Stateful Failover
(Optional) To configure Stateful Failover, page 49-4, provide the following parameters.
VLAN Enter the numeric ID of the VLAN interface you are using for the
failover link; for example, 12. This list is not automatically populated
with VLAN IDs—you must highlight “Not Selected” and type the
desired VLAN ID number; press your keyboard’s Tab key to activate
the related fields.
When configured for failover, the interface is directly connected to the
standby device.
Logical Name Enter a logical name for the Stateful failover VLAN interface.
Active IP Address Specify the active IP address for this interface.
Standby IP Address Specify a standby IP address for this interface.
To receive packets from both units in a failover pair, standby IP
addresses need to be configured on all interfaces. The Standby IP
address is used on the security appliance that is currently the standby
unit, and it must be in the same subnet as the active IP address.
Subnet Mask Enter the Subnet Netmask for the Active and Standby IP addresses.
Enable HTTP Replication When selected, allows stateful failover to copy active HTTP sessions to
the standby firewall. Otherwise, HTTP connections are disconnected at
failover. Disabling HTTP replication reduces the amount of traffic on
the state link.
Table 49-3 Failover Page (FWSM) (Continued)
Element Description