FWSM Failover on VSS environment

Unanswered Question
Jun 20th, 2010


Is FWSM Failover feature supported on a VSS environment? We currenlty have two 6509 with FWSM on both switches. VSS is currently enabled and I would also want to enable the failover on the FWSM. The current IOS running is s72033-adventerprisek9_wan-vz.122-33.SXI. Thanks

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
nprdomingo Sun, 06/20/2010 - 23:53

Thanks for your reply. How about the configuration? Will it be transparent? I can't find any configuration guide on FWSM failover on a VSS environment. Hope you can help. Thanks

Marcin Latosiewicz Mon, 06/21/2010 - 00:03

Well the FWSM (from config point of view) is not aware whether the setup is VSS, same way it's not aware if the blades in failover are in same or different chassis.

nprdomingo Mon, 06/21/2010 - 00:12


So after I upgrade my FWSM to 4.0.4. I will just use the same configuration like the one below?

hostname(config)# failover lan unit primary

hostname(config)# failover lan interface if_name vlan vlan

hostname(config)# failover interface ip if_name ip_addr mask standby ip_addr

For the VLAN, Will it be the same as the VLAN used by VSS?

Marcin Latosiewicz Mon, 06/21/2010 - 00:16

Well, normally you should split data vlans from failover vlan (requirement) and stateful link vlan (suggested). It's best practice.

I would not recommend mixing VSL and failover vlans - I'm not sure if any parser would complain though.

nprdomingo Mon, 06/21/2010 - 00:45

Thanks! Will test the configuration. And will let you know if I have more inquiries.


This Discussion