topic Re: active standby module in Network Security

active standby module

suthomas1 — Mon, 11 Mar 2019 19:40:40 GMT

Good Day experts,

As part of our year-start checks, we have to conduct intra chasis switchover test for firewall modules. active & standby are on single 6506.

We are lost how active & standby fail function part can be tested on same switch platform.Please guide me.

Thanks in advance.

Re: active standby module

mirober2 — Thu, 27 Jan 2011 16:04:35 GMT

Hello,

The easiest way is to do a 'no failover active' on the Active unit, or a 'failover active' on the Standby unit. This will force the switchover to happen, regardless of the state of the switch chassis. This is described here:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm41/configuration/guide/fail_f.html#wp1053740

There are also a few other failover scenarios you could test listed here:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm41/configuration/guide/fail_f.html#wp1131033

Hope that helps.

-Mike

Re: active standby module

suthomas1 — Thu, 27 Jan 2011 16:11:14 GMT

thank you. will the configuration for this test on same platform module switchover be same as modules on two different switches.

does this require some different vlan to be configured .

Re: active standby module

mirober2 — Thu, 27 Jan 2011 16:15:45 GMT

Yes, the 'failover active' command test is the same, regardless of whether you are using 1 chassis or 2 chassis. This command is run on one of the FWSMs in the pair. The test does not require a special VLAN to be configured. The command simply forces the units to failover to the opposite unit.

-Mike