topic Re: FWSM Active/Active multicontext preemption in Network Security

FWSM Active/Active multicontext preemption

jaydhindsa — Mon, 11 Mar 2019 10:24:47 GMT

Hi friends, I was wondering if any one of you have faced simillar problem that I am facing.

I have 2 FWSM's 3.1(5), in two seperate 6509's running native IOS 12.2(18)SXF7.

I have created 2 groups with one active on each switch. Problem is they are always active on the primary FWSM. Group 2 configured to stay active on secondary FWSM doesn't preempts. and likewise if you take primary down then all contexts are failed over to secondary but again wihtout any preemption for group 1 from Primary.

I checked wht ever I could remember like switch vlan's, sync between them, ping each other.

is there any body out there who has been throught this ?..

Thanks in advance

Pls see attached files for show tech.

Re: FWSM Active/Active multicontext preemption

ROBERTO TACCON — Tue, 05 Jun 2007 12:58:59 GMT

Hi,

I've checked the conf. but on the context admin I can't find the command :

failover replication http

Why ?

Re: FWSM Active/Active multicontext preemption

jaydhindsa — Tue, 05 Jun 2007 14:49:42 GMT

HI Friend,

I am not thinking of using admin context to carry user traffic,as I have 20 context license. I hope this answers your question

Thx

Jay

Re: FWSM Active/Active multicontext preemption

ROBERTO TACCON — Tue, 05 Jun 2007 15:15:58 GMT

Hi,

in the systems context I've the following conf:

#FWSM1

failover

failover lan unit secondary

failover lan interface failover_lan Vlan55

failover replication http

failover link failover_link Vlan56

failover interface ip failover_lan 1.1.1.5 255.255.255.252 standby 1.1.1.6

failover interface ip failover_link 1.1.1.1 255.255.255.252 standby 1.1.1.2

failover group 1

preempt

replication http

failover group 2

secondary

preempt

replication http

#FWSM2

failover

failover lan unit primary

failover lan interface failover_lan Vlan55

failover replication http

failover link failover_link Vlan56

failover interface ip failover_lan 1.1.1.5 255.255.255.252 standby 1.1.1.6

failover interface ip failover_link 1.1.1.1 255.255.255.252 standby 1.1.1.2

failover group 1

preempt

replication http

failover group 2

secondary

preempt

replication http