Pseudo-standby on secondary FWSM!

[nuetel111]

My secondary 7600-FWSM unit was reloaded and after that I have not been able to turn the failover on!

Please advice.

Thanks Kevin

Here is the error:

sh failover

Failover Off (pseudo-Standby)

Failover unit Secondary

Failover LAN Interface failover Vlan 1083

Unit Poll frequency 1 seconds, holdtime 15 seconds

Interface Poll frequency 15 seconds

Interface Policy 1

Monitored Interfaces 7 of 250 maximum

failover replication http

CORE-FWSM-1# conf t

CORE-FWSM-1(config)# failover

CORE-FWSM-1(config)#

Detected an Active mate

Vlan configuration mismatch

Failover will be disabled

[Jon Marshall · Accepted solution]

Vlan configuration mismatch sounds like you may have allocated some vlans to one of your firewalls that you haven't to the other.

In your 6500 config on both switches check the line

"firewall vlan-group x "vlan numbers"

Make sure they both list exactly the same vlan numbers.

HTH