Active Active Multiple context Failover command config

[mahesh18]

Hi Everyone,

When we config failover  interface on ASA  which is in multi context mode  and is active active.

We do that in system space with this command.

failover lan int  F1 GigabitEthernet0/2

failover interface ip F1 192.168.50.x 255.255.255.0 standby 191.168.50.x

Do we need to config the above command on two contexts also??????????

I checked current setup where i see above command on system space but not on context admin and x.

Regards

MAhesh

Message was edited by: mahesh parmar

[Jouni Forss · Accepted solution]

Hi,

You do the Failover configurations only in the System Context space of each ASA unit.

You can check this from the ASA Command Reference for example. It usually lists the modes in which they are usable.

Lets take for example the 2 commands you mention.

This is from the 8.4 software level Command Reference

The tables in the below text show which mode the command is supported on.

http://www.cisco.com/en/US/docs/security/asa/asa84/command/reference/ef.html#wp2013570

 failover lan interface
 Command Modes 
 The following table shows the modes in which you can enter the command: 

 

 Command Mode 
 

 Firewall Mode 
 

 Security Context 
 

 Routed 
 

 Transparent 
 

 Single 
 

 Multiple 
 

 Context 
 

 System 
 

 Global configuration 

 • 

 • 

 • 

 — 

 • 

http://www.cisco.com/en/US/docs/security/asa/asa84/command/reference/ef.html#wp2013028

 failover interface ip
 Command Modes 
 The following table shows the modes in which you can enter the command: 

 

 Command Mode 
 

 Firewall Mode 
 

 Security Context 
 

 Routed 
 

 Transparent 
 

 Single 
 

 Multiple 
 

 Context 
 

 System 
 

 Global configuration 

 • 

 • 

 • 

 — 

 • 

- Jouni

[mahesh18]

Hi Jouni,

Many thanks again.

Best regards

Mahesh