Solved: ACE 4710 config for failover on second unit

kasper123 · ‎11-05-2009

I'm trying to set up two ace 4170 in HA configuration.

Currently one of the devices is doing ssl offload and load balancing and is working fine.

What has to be done on the new unit in order for them to work as a HA pair?

Attached is my current config (I added HA setting in the unit allready).

Thank you.

Syed Iftekhar Ahmed · ‎11-05-2009

You simply need to configure ft related command on Standby and standby ACE will copy the config over from primary.

Assuming you are only using Admin context following will be the config on Primary & Standby ACE

------ on Primary ------

interface gigabitEthernet 1/2

ft-port vlan 30

no shutdown

ft interface vlan 30

ip address 192.168.60.1 255.255.255.0

peer ip address 192.168.60.2 255.255.255.0

no shutdown

ft peer 1

heartbeat interval 300

heartbeat count 10

ft-interface vlan 30

ft group 1

peer 1

priority 200

peer priority 100

associate-context Admin

inservice

-------------- On Secondary ---------------

interface gigabitEthernet 1/2

ft-port vlan 30

no shutdown

ft interface vlan 30

ip address 192.168.60.2 255.255.255.0

peer ip address 192.168.60.1 255.255.255.0

no shutdown

ft peer 1

heartbeat interval 300

heartbeat count 10

ft-interface vlan 30

ft group 1

peer 1

priority 100

peer priority 200

associate-context Admin

inservice

HTH

Syed Iftekhar Ahmed

View solution in original post

Syed Iftekhar Ahmed · ‎11-05-2009

You simply need to configure ft related command on Standby and standby ACE will copy the config over from primary.

Assuming you are only using Admin context following will be the config on Primary & Standby ACE

------ on Primary ------

interface gigabitEthernet 1/2

ft-port vlan 30

no shutdown

ft interface vlan 30

ip address 192.168.60.1 255.255.255.0

peer ip address 192.168.60.2 255.255.255.0

no shutdown

ft peer 1

heartbeat interval 300

heartbeat count 10

ft-interface vlan 30

ft group 1

peer 1

priority 200

peer priority 100

associate-context Admin

inservice

-------------- On Secondary ---------------

interface gigabitEthernet 1/2

ft-port vlan 30

no shutdown

ft interface vlan 30

ip address 192.168.60.2 255.255.255.0

peer ip address 192.168.60.1 255.255.255.0

no shutdown

ft peer 1

heartbeat interval 300

heartbeat count 10

ft-interface vlan 30

ft group 1

peer 1

priority 100

peer priority 200

associate-context Admin

inservice

HTH

Syed Iftekhar Ahmed

kasper123 · ‎11-06-2009

Thank you very much Syed!

I managed to get them working in failover.