To apply license in FWSM (Active-Active mode) and disable failover

[Farooq Razzaque]

Dear Team

I want to apply license to increase security context in FWSM which is running in Active-Active mode on VSS Core switches

As per below document, first we need to disable failover by entering 'no failover' command on active FWSM and then apply the license seperately on both FWSM.

I just want to know when i will disable the failover then standby move to pseudo-standby state. 

Will there be any services impact which are running behind the FWSM when disbaling the failover and then re-enabling the failover.

http://www.cisco.com/c/en/us/td/docs/security/fwsm/fwsm40/configuration/guide/fwsm_cfg/swcnfg_f.html#wp1073226

Appreciate your response.

[Vibhor Amrodia]

Hi,

I think in your case as it is Active/Active , there is one extra step required.

You need to make all the contexts active on one unit and on the other one all should be standby.

Then disable the failover and update the license and re-enable the failover.

Thanks and Regards,

Vibhor Amrodia

[Farooq Razzaque]

Dear Vibhor

Thanks for the reply.

I just want to know when i will disable the failover then standby move to pseudo-standby state. 

What is pseudo-standby state ?

Will there be any services impact which are running behind the FWSM when disabling the failover and then re-enabling the failover.

[Farooq Razzaque]

Dear Vibhor

Appreciate if your could spare some time and respond on the requested query.

Thanks in advance.

[Vibhor Amrodia]

Hi,

No , Pseudo standby will not affect any traffic for you. You can disable the fail-over on the Standby with both the groups active on the other Active Unit.

Update the licenses and re-enable the fail-over.

Thanks and Regards,

Vibhor Amrodia