failover with fwsm

[gdspa]

Hi all,

this is my situation: failover is off in primary unit and on in secondary unit. Now fwsm on the secondaty unit is working. If I activate failover on the primary unit, does it become active or not? If it becomes active, I think I will have some moments of disconnection, is it right?

[csco11049253]

Yes, even if you activae failover the secondary may remain active, however if you want primary to take over from secondary, you have add this command..

failover preempt

There will be atleast 2 timeouts for switchover.

[gdspa]

Thank you for your answer, I will try this evening. Another question: I am trying to create a vlan on fwsm, but if I try to ping from fwsm to a pc in the vlan, request arrives on pc, replay starts from pc but doesn't arrive to the fwsm even if I permit icmp traffic in "ICMP rules" on the fwsm. Even if I ping from pc to an host in other vlans, no messages appear in the log (debug level). Could it be a problem caused by the situation of failover?

[gdspa]

I inform that I solved the problem of the creation of a new vlan when I reactivated failover on the 2nd fwsm.