Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSS Config Synchronization


I have a similar question joerg.micheel already asked about Configuration Synchronization of CSS boxes.

My first box CSS-1 is already setup with the config as shown at the bottom (excluding Services, Rules),

and i have already reserved IPs for CSS-2 VLAN40 (Outside) ; VLAN70 (Inside) for VIP/ViF Redundancy.

initially i can manually configure CSS-2 with right IPs (VLAN40 - and VLAN70 - but when i will use the command Commit_vip_redundancy "local remote -a" on CSS-1

Will it copy the entire configuration (due to -a switch) including overriding VLAN70 IP-

Because in the Sync command there is no option to specify the remote side Ip address for inside interface.

if that happens, i will end up having as duplicate IP address on the inside network ??

and also how about other parameters such as final Hostname of CSS-2, Management IP address of CSS-2,

these parameters are expected to be unique on both boxes



CSS-1 configuration :


APP session

interface 1/1

bridge vlan 70

interface 1/2

bridge vlan 40

circuit VLAN40

ip address

ip virtual-router 1 priority 101 preempt

ip redundant-interface 1

ip redundant-vip 1

ip critical-service 1 upstream_downstream

circuit VLAN70

ip address

ip virtual-router 1 priority 101 preempt

ip redundant-interface 1

ip critical-service 1 upstream_downstream


Re: CSS Config Synchronization

The number of received ARP packets with a detected duplicate IP address. The duplicate IP address can be the local IP address, VIP, or virtual interface which can be viewed in the ICMP statistics.

New Member

Re: CSS Config Synchronization

I've now resolved this issue after getting second CSS Unit in-hand.

The Synchronization script actually copied all the configuration such as DQL, Owners, Content Rules, Services etc from Active Unit to Standby Unit. But The Interface IP addresses were left as it is, so The Script probably has built-in intelligence to not to override interface IP addresses - Which will result in Duplicate IP addresses.

Following was the output from the Script for Config Synchronization :

Digi-CSS-1# script play commit_vip_redundancy "local remote 10.10.40.

4 -a"


Checking available disk space on systems ...

Verifying app and redundancy configs ... \

Checking local and remote switch versions ...

Checking vip redundancy state.... -

Checking compatibility of systems......

Working |

Checking for SSL configuration ...-

Working -

Waiting for completion signal from remote switch .../

Verifying running-config copy success ...-

Commit successful!


CreatePlease login to create content