FWSM module level failover

Unanswered Question
May 6th, 2008


We have two sites DC & DR, with two 6509 and two FWSM.

Data flow is Cloud----Extr RTR--- IntRTR---FWSM---MSFC---, with this we have Internet connection terminated on FWSM with multiple context,

All the Incoming traffic is taken care by BGP at ISP end for failover between DC & DR and we configured HSRP for outgoing traffic failover on IntRTR.

This is our failover scenario, now I want FWSM module level failover, between DC & DR using two independent links on DC & DR.

I am expecting service from DR FWSM in case of FWSM failure at DC but at the same time, I want to use DC Internet connection only. We will use DR link only in case of DC link failure.

Is it possible?

Thank you,


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
smahbub Mon, 05/12/2008 - 09:02

The failover configuration requires two identical FWSMs connected to each other through a dedicated failover link and, optionally, a state link. The health of the active interfaces and units is monitored to determine if specific failover conditions are met. If those conditions are met, failover occurs.

Refer the URL below for the configuration guide of FWSM:



This Discussion