IDSM Module failover

arun_laksh · ‎04-22-2010

Hi Team,

We have IDSM and FWSM module installed on each Cisco switch 6500 series placed in Active/Standby mode (HSRP).

We want to perform failover testing with the below scenarios for the IDSM and FWSM module

1. How will the traffic flow if the IDSM module placed in the active switch is brought down or failed?

2. How will the traffic flow if the FWSM module placed in the active switch is brought down or failed?

3. How will the traffic flow if both FWSM and IDSM module placed in the active switch is brought down or failed?

Regards,

Arun.L

Farrukh Haroon · ‎04-22-2010

Regarding the FWSM, you can issue the 'no failover active' command on the Active box or 'failover active' on the Standby box to force failover.

For the IDSM, you can manipulate the spanning tree cost on the active IDSM-2 module (making it higher), so that the secondary module becomes the primary traffic path. Sometimes this automatically happens after the FWSM failover (because of SPT cost change), but this would depend on your spanning tree topology. This can be done via the intrusion-detection comand on the host switch chassis.

Please rate if helpful.

Regards

Farrukh