topic Re: FWSM Failover in Network Security https://community.cisco.com/t5/network-security/fwsm-failover/m-p/1250421#M858594 <HTML><HEAD></HEAD><BODY><P>You can read about monitor-interface command here:</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/command/reference/m.html#wp1701962" target="_blank">http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/command/reference/m.html#wp1701962</A></P><P></P><P>What you read is correct. Hello messages are sent over the failover link as well as other interfaces.</P><P></P><P>Both units keep a check on the other. If at any time one unit ends up less healthy (less interfaces up or other hardware failure) then, the healthier of the two will take over as the active unit.</P><P></P><P></P></BODY></HTML> Fri, 17 Jul 2009 02:29:36 GMT Kureli Sankar 2009-07-17T02:29:36Z FWSM Failover https://community.cisco.com/t5/network-security/fwsm-failover/m-p/1250420#M858590 <P>Folks,</P><P> I have a question regarding FWSM failover. I was reading the documentation and it said that hellos are sent out over the failover link as well as all the interfaces. If any of the interfaces goes down the firewall is declaired down???</P><P></P><P>what is the concept of monitor-interface then? I am confussed please help.</P> Mon, 11 Mar 2019 15:56:08 GMT https://community.cisco.com/t5/network-security/fwsm-failover/m-p/1250420#M858590 NAVIN PARWAL 2019-03-11T15:56:08Z Re: FWSM Failover https://community.cisco.com/t5/network-security/fwsm-failover/m-p/1250421#M858594 <HTML><HEAD></HEAD><BODY><P>You can read about monitor-interface command here:</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/command/reference/m.html#wp1701962" target="_blank">http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/command/reference/m.html#wp1701962</A></P><P></P><P>What you read is correct. Hello messages are sent over the failover link as well as other interfaces.</P><P></P><P>Both units keep a check on the other. If at any time one unit ends up less healthy (less interfaces up or other hardware failure) then, the healthier of the two will take over as the active unit.</P><P></P><P></P></BODY></HTML> Fri, 17 Jul 2009 02:29:36 GMT https://community.cisco.com/t5/network-security/fwsm-failover/m-p/1250421#M858594 Kureli Sankar 2009-07-17T02:29:36Z Re: FWSM Failover https://community.cisco.com/t5/network-security/fwsm-failover/m-p/1250422#M858598 <HTML><HEAD></HEAD><BODY><P>if that is the case ( firewalls monitoring each other to see who is healthy based on interface status then why do we need monitor-interface command?</P></BODY></HTML> Fri, 17 Jul 2009 03:09:51 GMT https://community.cisco.com/t5/network-security/fwsm-failover/m-p/1250422#M858598 NAVIN PARWAL 2009-07-17T03:09:51Z