Cisco Systems ASA5515K9, ASA 5500 Changing Command Modes

63-22
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter63 Configuring Active/Active Failover
Remote Command Execution
Changing Command Modes
The failover exec command maintains a command mode state that is separate from the command mode
of your terminal session. By default, the failover exec command mode starts in global configuration
mode for the specified device. You can change that command mode by sending the appropriate command
(such as the interface command) using the failover exec command. The session prompt does not change
when you change mode using failover exec.
For example, if you are logged in to global configuration mode of the active unit of a failover pair, and
you use the failover exec active command to change to interface configuration mode, the terminal
prompt remains in global configuration mode, but commands entered using failover exec are entered in
interface configuration mode.
The following examples shows the difference between the terminal session mode and the failover exec
command mode. In the example, the administrator changes the failover exec mode on the active unit to
interface configuration mode for the interface GigabitEthernet0/1. After that, all commands entered
using failover exec active are sent to interface configuration mode for interface GigabitEthernet0/1. The
administrator then uses failover exec active to assign an IP address to that interface. Although the prompt
indicates global configuration mode, the failover exec active mode is in interface configuration mode.
hostname(config)# failover exec active interface GigabitEthernet0/1
hostname(config)# failover exec active ip address 192.168.1.1 255.255.255.0 standby
192.168.1.2
hostname(config)# router rip
hostname(config-router)#
Changing commands modes for your current session to the device does not affect the command mode
used by the failover exec command. For example, if you are in interface configuration mode on the
active unit, and you have not changed the failover exec command mode, the following command would
be executed in global configuration mode. The result would be that your session to the device remains
in interface configuration mode, while commands entered using failover exec active are sent to router
configuration mode for the specified routing process.
hostname(config-if)# failover exec active router ospf 100
hostname(config-if)#
Use the show failover exec command to display the command mode on the specified device in which
commands sent with the failover exec command are executed. The show failover exec command takes
the same keywords as the failover exec command: active, mate, or standby. The failover exec mode
for each device is tracked separately.
For example, the following is sample output from the show failover exec command entered on the
standby unit:
hostname(config)# failover exec active interface GigabitEthernet0/1
hostname(config)# sh failover exec active
Active unit Failover EXEC is at interface sub-command mode
hostname(config)# sh failover exec standby
Standby unit Failover EXEC is at config mode
hostname(config)# sh failover exec mate
Active unit Failover EXEC is at interface sub-command mode