Firewall fail-over.

[Cisco Freak]

Hi,

I am trying to figure out the difference if I issue the command 'failover lan unit primary' in configuration mode of the secondary unit V/S issuing the command 'failover active" from enable mode

CF

[Andre Neethling]

You use "failover lan unit primary" to mark/label your device as your primary device. You use "failover active" when you want to trigger failover and make that device the active device in the failover pair.

[Andre Neethling]

When you issue this command below to change your device prompt. You can then specify what you want to see in your prompt. And in failover scenario the active device will assume the hostname and IP address of the previous active device you can see exactly what the device "label" is because the prompt will show you which device is your active and primary device.

LABFW/sec/actNoFailover(config)# prompt ?

configure mode commands/options:
  cluster-unit  Display the cluster unit name in the session prompt
  context       Display the context in the session prompt (multimode only)
  domain        Display the domain in the session prompt
  hostname      Display the hostname in the session prompt
  priority      Display the priority in the session prompt
  state         Display the traffic passing state in the session prompt