MARS200 vrs 4.3.3 (how to add device pair in failover FWSM 3.2.3 mod)

Unanswered Question
Mar 12th, 2008
User Badges:

What approach should I take in adding a FWSM to MARS200 vrs 4.3.3 when the FWSM vrs 3.2.3 is in an Active-Standby pair? No problem adding the active module, but how do you add the standby unit? And do I need to do that anyway>

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
pmccubbin Wed, 03/12/2008 - 13:21
User Badges:
  • Silver, 250 points or more

Hi Gary,


This is from the 5.3 MARS User Guide:


"When monitoring a failover pair of Cisco firewall devices, you should designate the primary Cisco firewall device as the device to be monitored. If failover occurs, the secondary device assumes the IP address of the primary, which ensures that session correlation is maintained after the failover. The same focus on the primary is true for performing any bootstrap operations. The secondary device will synchronize with the configuration settings of the primary."


http://www.cisco.com/en/US/docs/security/security_management/cs-mars/5.3/user/guide/local_controller/cfgfwall.html#wp1180494


In sum, you shouldn't need to add the standby unit.


Hope this helps.


Paul

Actions

This Discussion