MARS200 vrs 4.3.3 (how to add device pair in failover FWSM 3.2.3 mod)

[garyprice]

What approach should I take in adding a FWSM to MARS200 vrs 4.3.3 when the FWSM vrs 3.2.3 is in an Active-Standby pair? No problem adding the active module, but how do you add the standby unit? And do I need to do that anyway>

[pmccubbin]

Hi Gary,

This is from the 5.3 MARS User Guide:

"When monitoring a failover pair of Cisco firewall devices, you should designate the primary Cisco firewall device as the device to be monitored. If failover occurs, the secondary device assumes the IP address of the primary, which ensures that session correlation is maintained after the failover. The same focus on the primary is true for performing any bootstrap operations. The secondary device will synchronize with the configuration settings of the primary."

http://www.cisco.com/en/US/docs/security/security_management/cs-mars/5.3/user/guide/local_controller/cfgfwall.html#wp1180494

In sum, you shouldn't need to add the standby unit.

Hope this helps.

Paul