(Note that both units must have the same hardware and software configuration.) In the list that follows, both must
Be the same model
Have the same number and types of interfaces
Have the same amount of Flash memory and the same amount of RAM
Be in the same operating mode (routed or transparent, single or multiple context)
Have same major (first number) and minor (second number) software version; for example, with version 8.0(3), the number
3, which is in the parenthesis, can vary between the two devices, but 8.0 must be the same
Failover Link
The failover link interface is used to monitor the health and operating status of each unit in a failover mode. On the PIX 500 platform, the failover link can be either a LAN-based connection or a dedicated serial failover cable. On the ASA 5500 series
platform, the failover link can only be a LAN-based connection.
State Link
The Security Appliance supports two types of failover, regular and stateful. In a regular failover mode (nonstateful), all active
connections are dropped, and clients need to reestablish connections when the new active unit takes over, because the new device has no knowledge of the previous connections. In a stateful-failover environment, active connections do not need to
reestablish when a failover occurs.
Pages:
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323