Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

IDSM Module failover

Hi Team,

We have IDSM and FWSM module installed on each Cisco switch 6500 series placed in Active/Standby mode (HSRP).

We want to perform failover testing with the below scenarios for the IDSM and FWSM module

1. How will the traffic flow if the IDSM module placed in the active switch is brought down or failed?

2. How will the traffic flow if the FWSM module placed in the active switch is brought down or failed?

3. How will the traffic flow if both FWSM and IDSM module placed in the active switch is brought down or failed?

Regards,

Arun.L

1 REPLY

Re: IDSM Module failover

Regarding the FWSM, you can issue the 'no failover active' command on the Active box or 'failover active' on the Standby box to force failover.

For the IDSM, you can manipulate the spanning tree cost on the active IDSM-2 module (making it higher), so that the secondary module becomes the primary traffic path. Sometimes this automatically happens after the FWSM failover (because of SPT cost change), but this would depend on your spanning tree topology. This can be done via the intrusion-detection comand on the host switch chassis.

Please rate if helpful.

Regards

Farrukh

309
Views
0
Helpful
1
Replies
CreatePlease to create content