Dears
I am facing problem with FWSM. It is using version 3.2. I have 2 caore switches and each one have one FWSM. Core switches and FWSM are working in ACTIVE/STANDBY mode. If I am trying to do session from secondary switch it can only go to the Active FWSM which is primary. Also FWSM is switching automatically from ACTIVE to standby.Then Primary core switch can session to secondary only.Please see the show failover and show module result below.
sh run | i failover
failover
failover lan unit primary
failover preempt
failover lan interface faillink Vlan250
failover replication http
failover link statelink Vlan251
failover interface ip faillink 192.168.253.1 255.255.255.252 standby 192.168.253.2
failover interface ip statelink 192.168.253.5 255.255.255.252 standby 192.168.253.6
max-failed-attempts 2
show failover
Failover On
Failover unit Primary
Failover LAN Interface: faillink Vlan 250 (up)
Unit Poll frequency 1 seconds, holdtime 15 seconds
Interface Poll frequency 15 seconds
Interface Policy 50%
Monitored Interfaces 3 of 250 maximum
failover replication http
Config sync: active
Version: Ours 3.2(2), Mate 3.2(2)
Last Failover at: 12:48:17 KSA Jan 11 2011
This host: Primary - Active
Active time: 1622 (sec)
Interface FWSM-SUP (192.168.10.4): Normal (Waiting)
Interface To-SPZ (10.10.20.20): Normal (Waiting)
Interface FWSM-OAM-SD (172.16.2.5): Normal (Waiting)
Other host: Primary - Failed
Active time: 777 (sec)
Interface FWSM-SUP (192.168.10.5): Normal (Waiting)
Interface To-SPZ (10.10.20.21): Normal (Waiting)
Interface FWSM-OAM-SD (172.16.2.6): Normal (Waiting)
Stateful Failover Logical Update Statistics
Link : statelink Vlan 251 (up)
Stateful Obj xmit xerr rcv rerr
General 161 0 1277 0
sys cmd 104 0 104 0
up time 0 0 0 0
RPC services 0 0 0 0
TCP conn 33 0 1096 0
UDP conn 14 0 3 0
ARP tbl 10 0 74 0
Xlate_Timeout 0 0 0 0
AAA tbl 0 0 0 0
DACL 0 0 0 0
Logical Update Queue Information
Cur Max Total
Recv Q: 0 2 919
Xmit Q: 0 0 114
show
module
Mod Ports Card Type Model Serial No.
--- ----- -------------------------------------- ------------------ -----------
7 2 Supervisor Engine 720 (Active) WS-SUP720-3B SAL1208GSHW
9 24 CEF720 24 port 1000mb SFP WS-X6724-SFP SAL1220QSZJ
10 48 48 port 10/100/1000mb EtherModule WS-X6148-GE-TX SAL1220QPY6
11 0 2-subslot Services SPA Carrier-400 7600-SSC-400 JAE1218GH2Z
12 6 Firewall Module WS-SVC-FWM-1 SAD1220021T
13 0 2 port adapter Enhanced FlexWAN WS-X6582-2PA JAE1219HIP6
Mod MAC addresses Hw Fw Sw Status
--- ---------------------------------- ------ ------------ ------------ -------
7 0016.9de6.7c2c to 0016.9de6.7c2f 5.6 8.5(2) 12.2(18)SXF1 Ok
9 0021.55d7.1f08 to 0021.55d7.1f1f 3.1 12.2(18r)S1 12.2(18)SXF1 Ok
10 0021.55e3.8ff0 to 0021.55e3.901f 7.2 7.2(1) 8.5(0.46)RFW Ok
11 001d.4518.772c to 001d.4518.776b 2.0 12.2(18)SXF1 12.2(18)SXF1 Ok
12 0021.5517.3db4 to 0021.5517.3dbb 4.2 7.2(1) 3.2(2) Ok
13 001d.7031.b380 to 001d.7031.b3bf 2.3 12.2(18)SXF1 12.2(18)SXF1 Ok
Mod Sub-Module Model Serial Hw Status
---- --------------------------- ------------------ ----------- ------- -------
7 Policy Feature Card 3 WS-F6K-PFC3B SAL1208GVPW 2.3 Ok
7 MSFC3 Daughterboard WS-SUP720 SAL1208GWSY 3.1 Ok
9 Centralized Forwarding Card WS-F6700-CFC SAL1219Q9N0 4.0 Ok
11/0 2 Gbps IPSec SPA SPA-IPSEC-2G JAE1215E6SR 2.0 Ok
Mod Online Diag Status
---- -------------------
7 Pass
9 Pass
10 Pass
11 Pass
11/0 Pass
12 Pass
13 Pass
