topic Firewall fail-over. in Network Security

Firewall fail-over.

Cisco Freak — Tue, 12 Mar 2019 06:59:57 GMT

Hi,

I am trying to figure out the difference if I issue the command 'failover lan unit primary' in configuration mode of the secondary unit V/S issuing the command 'failover active" from enable mode

CF

You use "failover lan unit

Andre Neethling — Mon, 07 Dec 2015 07:51:37 GMT

You use "failover lan unit primary" to mark/label your device as your primary device. You use "failover active" when you want to trigger failover and make that device the active device in the failover pair.

When you issue this command

Andre Neethling — Mon, 07 Dec 2015 07:57:16 GMT

When you issue this command below to change your device prompt. You can then specify what you want to see in your prompt. And in failover scenario the active device will assume the hostname and IP address of the previous active device you can see exactly what the device "label" is because the prompt will show you which device is your active and primary device.

LABFW/sec/actNoFailover(config)# prompt ?

configure mode commands/options:
cluster-unit Display the cluster unit name in the session prompt
context       Display the context in the session prompt (multimode only)
domain        Display the domain in the session prompt
hostname      Display the hostname in the session prompt
priority      Display the priority in the session prompt
state         Display the traffic passing state in the session prompt