7-8
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter7 Using the High Availability and Scalability Wizard
Configuring Failover with the High Availability and Scalability Wizard
Step5 Enter or choose a subnet mask (IPv4 addresses or a prefix (IPv6 Addresses) for the Active IP and
Standby IP addresses.
Step6 (For ASA 5505 only) Choose the switch port from the drop-down list, which includes the current VLAN
assigned to each switch port and any name associated with the VLAN. Because a default VLAN exists
for every switch port, do not choose VLAN 1 for the inside port, because one less inside port will be
available for another use.
Note To provide sufficient bandwidth for failover, do not use trunks or PoE for failover.
Step7 (Optional) Enter the secret key used to encrypt failover communication. If you leave this field blank,
failover communication, including any passwords or keys in the configuration that are sent during
command replication, will be in clear text.
State Link Configuration
Note The State Link Configuration screen does not appear on the ASA 5505.
The State Link Configuration screen lets you enable and disable Stateful Failover, and configure Stateful
Failover link properties.
To enable Stateful Failover, perform the following steps:
Step1 To pass state information across the LAN-based failover link, click Use the LAN link as the State Link.
Step2 To disable Stateful Failover, click Disable Stateful Failover.
Step3 To configure an unused interface as the Stateful Failover interface, click Configure another interface
for Stateful failover.
Step4 Choose the interface to use for Stateful Failover communication from the drop-down list.
Step5 Enter the name for the Stateful Failover interface.
Step6 Enter the IP address for the Stateful Failover link on the unit that has failover group 1 in the active state.
This field accepts an IPv4 or IPv6 address.
Step7 Enter the IP address for the Stateful Failover link on the unit that has failover group 1 in the standby
state. This field accepts an IPv4 or IPv6 address.
Step8 Enter or choose a subnet mask (IPv4 addresses or a prefix (IPv6 Addresses) for the Active IP and
Standby IP addresses.
Standby Address Configuration
Use the Standby Address Configuration screen to assign standby IP addresses to the interface on the
ASA. The interfaces currently configured on the failover devices appear. The interfaces are grouped by
context, and the contexts are grouped by failover group.
To assign standby IP addresses to the interface on the ASA, perform the following steps: