FWSM 4.0: switch from active/standby to active/active failover mode

Hello,
I have a pair of FWSM's running version 4.0 currently in active/standby failover mode, and I'd like to switch them to be active/active. Is there a documented procedure for doing this? What are the implications for any contexts switched to be primary on the FWSM that is currently acting as a standby (i.e., what kind of outage time can we expect)?
Thanks in advance,
Mike

Hi Bro
Thanks for the update, but still you'll need to create 2 contexts, each context will be ACTIVE on different Cisco ASA FW units. Hence, there will be some cut, copy and paste effort, not forgetting recabling, if that's needed. Here's a Cisco document to configure ACTIVE/ACTIVE for those who can't seem to find this document http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml#req
Conclusion: There will be some network downtime. I'm guessing 15min, if it was me :-)
P/S: If you think this comment is helpful, please do rate it nicely :-)

Similar Messages

Audigy Switches from 5.1 back to 2 speaker mode everytime I reb

Anyone know how to fix this?
Thanks,
Robert.Message Edited by rbarclay on -07-2004 09:09 PM

My answer assumes that you are using the Creative software. Go to speaker settings in the Creative console. On the speaker selection tab, there is a box that says "Synchronize with Control Panel". Make sure that you check that box. If it is unchecked, Windows automatically sets your speakers back to 2, whenever you reboot.

Problem with Active Standby Pair

Hi ALL!
I have a problem with Active Standby Pair replication.
I have 2 instance TT on host1 and host2
On host1 i created 2 data store rep1 and rep2
On host2 i created 1 data store t1
ALL data stores identical, and have one table REP_TAB.
AFter this i work with rep1 ds:
Creating active standby pair:
create active standby pair rep1 on "host1",
t1 on "host2"
subscriber rep2 on "host1"
store rep1 on "host1" port 18000 timeout 30
store t1 on "host2" port 18000 timeout 30and starting repagent
call ttrepstart;After this i try using ttrepadmin utility and ALWAYS GET this error
C:\Documents and Settings\user1>ttrepadmin -duplicate -from rep1 -host "host1" rep4
Enter password for 'tt':
TT12048: Error performing backup at source. More information can be found in th
e source's message log
TT7001: REP1:receiver.c(4979): TT7001: User authentication failedPasswort right. I dont know what i am doing wrong? Please Help!

Did you enable Access Control in this instance when you installed? If so, have you created the relevant users in the TimesTen instance?
If you have access to Metalink you may find Note 421220.1 useful in clarifying this process, and also for avoiding other problems you may encounter after performing a successful duplicate.

FWSM move from Active/Standby to Active/active

Hi there,
we have some FWSM installed in 6500 with many contexts in them. They are at the moment configured as Active/Standby and in production. But we have noticed that whenever a backup is run which goes through some of the contexts, the FWSM start counting errors which was already determined to be an oversubscription issue. So, while we wait for the new ASA 5585X to arrive and finally replace them, we want to mitigate the issue by configuring the FWSM as Active/Active and move the contexts for backup traffic to the other box (keeping the production contexts in the other one).
My question is, can this be done without impacting the production traffic? Or as soon as we enable the active/active by the configuration of the groups and assignments of the contexts, the traffic will be impacted and we will produce an outage to the network?
Thanks in advance for your help.
Regards,
Paula

So no answers?
Just one to update why had problem here: we need to to pull changes from Physical StandBy, because of performance reasons we cannot afford to reload every table with full refresh, we only want to get changes. At first I thought that it will be easy just create materialized view log and do basic replication, but in Physical StandBy we cant do it

Calendar missing from N95 Active Standby

I'm really hoping someone can shed some light on this ... I had my active standby activated on my N95, all fine. Then I turned it off recently. I went to switch it back on, and the calendar's missing! It gives me no options to be able to switch it back on! I've tried a factory reset (under Tools/Settings/General) but that hasn't helped. Tried to see if there was a Software or Firmware upgrade, but apparently my phone is all up to date. Any ideas? Anyone? (I know this seems like a weird request, as there are HEAPS of posts asking how to get rid of the calendar on active standby, but the fact I didn't change anything & it's just done it is concerning.)
Message Edited by nemnem on 04-May-2008 03:24 AM

Back up all your data to your PC using PC Suite's content copier, and then shut down your phone. Hold down 3 buttons: GREEN, 3 & * while switching on your phone. Make sure don't release your fingers till the phone ask for pin. You'll lose everything that's on your phone memory, and if you restore that from a back up, you'll be back to where you started, but this seems to have worked. You'll also lose things that your network operator may have installed. But oh well. Still no idea why it happened in the first place though!

Calendar gone from N73 Active standby

I have recently installed some new themes but lost my calendar from the active standby screen. When I change the theme back to standard nokia one, and turn active standby off then on again, it returns.
I am getting very bored with he nokia theme but use the calendar display too much to do without it.
I have never had this problem before. All software/firmware is up to date.

Back up all your data to your PC using PC Suite's content copier, and then shut down your phone. Hold down 3 buttons: GREEN, 3 & * while switching on your phone. Make sure don't release your fingers till the phone ask for pin. You'll lose everything that's on your phone memory, and if you restore that from a back up, you'll be back to where you started, but this seems to have worked. You'll also lose things that your network operator may have installed. But oh well. Still no idea why it happened in the first place though!

Need advice switch Active/Active or Active/Standby?

Dear all,
I would like all of you advice on daigram as in the attach file.
I have 2 ASA 5520 and Core-switch 3560 (2unit), and i want to configure Active/Standy on ASA 5520
but on Core-switch 3560 i'm not sure the technology that i should apply on this.
Should i use Active/Standby or Active/Active? if i use Active/Active which protocal shoudl i use ?
How it process when it fail?
Best Regards,
Rechard

Dear Amit,
Could i ask you some question about connection from both ASA and both Core-switch as below that:
1- could i combine interface on ASA to Core-swith ?
Ex:
interface Redundant1
member-interface GigabitEthernet0/2
member-interface GigabitEthernet0/3
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0 standby 192.168.1.2
================
I mean that G0/2 connect to Core-switch01 and G0/3 connect to Core-switch02.
Does command ip address 192.168.1.1 255.255.255.0 standby 192.168.1.2 support interface redundant1 ?
or should we use separat interface ( don't use interface redundate 1) for failover?
which option that standart technology?
Best Regards,
rechard

FWSM Active/Standby in VSS mode

hello,
i do have two 6500 in VSS mode , and one FWSM module on each 6500, i want to configure these modules as Active/Standby, how do i start , should i follow this (not in VSS mode):
http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/fail_f.html
or are there other things should i do to make it work,
thanks

up!

Goldengate from physical standby with Active data guard or from logical standby - which is better?

Hi,
We have Oracle 11.2.0.4 and are currently using Active Data Guard on a physical standby. My boss wants me to use Goldengate
to replicate several schema from Oracle to SqlSserver. She doesn't want to touch the Primary, which is in production. Would it be better
to setup a Logical standby for Goldendate to use, in addition to the Physical standby? Or will it be sufficient to use the Physical standby?
The application tables don't all have primary keys. I'm trying to decide if the Logical standby adds another layer of complexity or would
introduce delays in getting the data from Oracle to Sqlserver.
Thanks in advance,

Hi,
In this case I recommend you to use physical standby + Golden gate with ALO mode. You might have sligthly more trouble in logical standby. it means you might have more trouble at Goldengate's extract side.
You said
The application tables don't all have primary keys.
so you have to add keycols on replicat side.
I recommend you to add an index which should consist of keycols columns. it will be necessary for replicat performance.
Best Regards

2 * 4260 Sensors connected to Active/standby FWSM in 6500

4260 Sensors connected to Active/ Active firewalls
I have the following scenario:
We have two edge firewalls with Active/ standbye setup connected directly to two core switches5600. New two IPS sensor s4260 are required to be connected inline between the FWSM and core switches. What is the best practice design for such a scenario? Does the below diagram work fine in this case or another design is applicable?
we use vlan paring

re you using Inline Interface Pair or VLAN Pair?
we will use Vlan Pair
What is the expected throughput of the Network?
100 mb/s
Are these WAN firewalls or Internet?
wan firewall (FWSM)
Are there any server farms?
conected 6500

Recently switched from powermac to mac pro5 2x2.66GHz 6 -core xeon running FCP 7 on OS 10.6.8 exporting qt files and rendering project files now takes longer than my old machine looking at activity mon and % of user is aroun 6 and % of idle around 42

recently switched from powermac to mac pro5 2x2.66GHz 6 -core xeon running FCP 7 on OS 10.6.8 exporting qt files and rendering project files now takes longer than my old machine looking at activity mon and % of user is aroun 6 and % of idle around 42 are all the cores being used with FCP7?

johnnyapplesod wrote:
exporting qt files and rendering project files now takes longer than my old machine
It's because the PowerMac G5 had HUGE bandwidth with a fat BUS on each processsor so they could run hard, hot and heavy.
It's not so with the Intel processors which are multi-core and share a common bus thus bottleneck.
The newer Intel processors can do more work on the CPU, but when it comes to in/out they are s-l-o-w.
I've had a wickedly fast dual processor (not dual core) G5, RAID 0 pair of 10,000 RPM drives as boot and a fast video card, I could do a lot very very fast.
You'll likely have to upgrade to Final Cut X to get more cores utilized, prepare to cry a little bit, Apple is working on the features they stripped out of it to make amends to pro users who complained loudly. (all over TV too)
http://www.loopinsight.com/2011/09/20/apple-releases-major-update-to-final-cut-p ro-x-release-demo-version/

Is it possible to switch from Office 365 online user management to Active Directory after Exchange online migration?

If we utilize the Cutover method to migrate from on-premise Exchange (2007) to Office 365, which to my understanding will hand over user management/authentication to Office 365 online during the process, is possible to later switch from Office 365 user management
to Active Directory (synced to a future local domain, or even possibly via AD federation single sign-on)? If so, how difficult is this process and is there any documentation available?
Asking this because the organization I'm working for plans to upgrade (re-do actually) its entire infrastructure. There will be a completely brand new domain/AD set up that's totally unrelated to the old one. At the same time, we also plan to migrate
all emails (previously hosted locally on Exchange 2007) to Office 365 and get rid of local exchange. Now because we will set up new domain, we do not want to carry over the older AD to the cloud, hence we will not use the "Staged Migration".
So the plan is to to use "Cutover" migration first, which means all authentications will become Office 365 managed. That's fine for now. But later, after we set up our new domain and AD controller etc, we'd like to have Exchange Online switch back
to syncing with our new on-premise AD. We'd also like to consider the AD Federation Services if it's not too complicated to set up.
Your advice on this would be greatly appreciated!

In principle, you cannot sync back from the cloud AD to the on-prem, yet. But you can take advantage of the soft-matching mechanism once you have the new AD in place:
http://support.microsoft.com/kb/2641663
Be careful though, as the moment you turn on Dirsync, all the matching users in the cloud will have their attributes overwritten. A very good idea is to do an 'export' of the cloud AD first, using the WAAD module for PowerShell and the Get-MsolUser cmdlets,
which you can then use to compare or import data in the new on-prem AD. Some links:
http://technet.microsoft.com/en-us/library/hh974317.aspx
http://msdn.microsoft.com/en-us/library/azure/dn194133.aspx

Audit DBA Activity, skip table from logical standby!

Dear All,
My database is 10gR2 on windows 2003 server.
I want to know if I can put some audit on the commands: execute dbms_logstdby.skip() to skip tables from Logical standby and also the same on unskipping the objects exec dbms_logstdby.unskip.
Thanks, Imran

Hi,
Given that your Database is 10g, the auditing options were extended to included DML from only SELECT in 9i, but not audit on procedures. You could double check the Fine Grained Auditing options in 10g, but I don't think this extends to DBMS_ packages.
I would consider writing a trigger or a small job that monitors the DBA_LOGSTDBY_SKIP view for additional entries. This is the only workaround that I can suggest that might fit your needs.

ORA-16136: Managed Standby Recovery not active

Hi
I am trying implement the dataguard in the windows platform. And this is my first time. Right now iam trying on physical standby. i have done everything as per the document. But iam getting some error. After giving the
SQL> ALTER DATABASE RECOVER MANAGED STANDBY DATABASE DISCONNECT FROM SESSION;
SQL> ALTER SYSTEM SWITCH LOGFILE;
SQL> recover managed standby database cancel;
// I am getting error
ORA-16136: Managed Standby Recovery not active
When just like that i tried to open the standby database in read only mode, i am getting error
SQL> alter database open read only;
alter database open read only
ERROR at line 1:
ORA-16004: backup database requires recovery
ORA-01157: cannot identify/lock data file 1 - see DBWR trace file
ORA-01110: data file 1: 'C:\ORACLE\PRODUCT\10.2.0\ORADATA\DB1\SYSTEM01.DBF'
When i checked the alert log file of Primary Database, it shows:
PING[ARCo]: Heartbeat failed to connect to standby 'db2sby'. Error is 1031.
Wed Sep 01 14:10:27 2010
Thread 1 advanced to log sequence 337 (LGWR switch)
Current log# 2 seq# 337 mem# 0: C:\ORACLE\PRODUCT\10.2.0\ORADATA\DB1\REDO02.LOG
Wed Sep 01 14:10:28 2010
Deleted Oracle managed file C:\ORACLE\PRODUCT\10.2.0\FLASH_RECOVERY_AREA\DB1\ARCHIVELOG\2010_02_25\O1_MF_1_224_5RD10Z5V_.ARC
Wed Sep 01 14:14:53 2010
Error 1031 received logging on to the standby
Wed Sep 01 14:14:53 2010
Errors in file c:\oracle\product\10.2.0\admin\db1\bdump\db1_arco_2156.trc:
ORA-01031: insufficient privileges
PING[ARCo]: Heartbeat failed to connect to standby 'db2sby'. Error is 1031.
Wed Sep 01 14:19:53 2010
Error 1031 received logging on to the standby
Wed Sep 01 14:19:53 2010
Errors in file c:\oracle\product\10.2.0\admin\db1\bdump\db1_arco_2156.trc:
ORA-01031: insufficient privileges
And when i checked alert log file of stand by database:
Wed Sep 01 14:13:19 2010
Errors in file c:\oracle\product\10.2.0\standbyy\admin\db2\bdump\db2sby_dbw0_3060.trc:
ORA-01157: cannot identify/lock data file 9 - see DBWR trace file
ORA-01110: data file 9: 'C:\TSUNDO12.DBF'
ORA-27086: unable to lock file - already in use
OSD-00001: additional error information
O/S-Error: (OS 101) The exclusive semaphore is owned by another process
--> The above error of Standby was coming for each datafile such as system, users etc.
Kindly Help me.
Shiyas M

here is the pfile of Primary Database:
db1.__db_cache_size=188743680
db1.__java_pool_size=4194304
db1.__large_pool_size=4194304
db1.__shared_pool_size=83886080
db1.__streams_pool_size=0
*.audit_file_dest='C:\oracle\product\10.2.0/admin/db1/adump'
*.background_dump_dest='C:\oracle\product\10.2.0/admin/db1/bdump'
*.compatible='10.2.0.1.0'
*.control_files='C:\oracle\product\10.2.0\oradata\db1\control01.ctl','C:\oracle\product\10.2.0\oradata\db1\control02.ctl','C:\oracle\product\10.2.0\oradata\db1\control03.ctl'
*.core_dump_dest='C:\oracle\product\10.2.0/admin/db1/cdump'
*.db_16k_cache_size=4194304
*.db_block_size=8192
*.db_domain=''
*.db_file_multiblock_read_count=16
*.db_name='db1'
*.DB_UNIQUE_NAME='db1prim'
*.LOG_ARCHIVE_CONFIG='DG_CONFIG=(db1,db2sby)'
*.LOG_ARCHIVE_DEST_1='LOCATION=C:\oracle\product\10.2.0\ARCHIVELOG VALID_FOR=(ALL_LOGFILES,ALL_ROLES) DB_UNIQUE_NAME=db1prim'
*.LOG_ARCHIVE_DEST_2='SERVICE=db2sby LGWR ASYNC VALID_FOR=(ONLINE_LOGFILES,PRIMARY_ROLE) DB_UNIQUE_NAME=db2sby'
*.LOG_ARCHIVE_DEST_STATE_1=ENABLE
*.LOG_ARCHIVE_DEST_STATE_2=ENABLE
*.LOG_ARCHIVE_FORMAT=%t_%s_%r.arc
*.LOG_ARCHIVE_MAX_PROCESSES=30
*.FAL_SERVER=db2sby
*.FAL_CLIENT=db1
*.DB_FILE_NAME_CONVERT='C:\oracle\product\10.2.0\Standbyy\oradata\DB2','C:\oracle\product\10.2.0\oradata\db1'
*.LOG_FILE_NAME_CONVERT='C:\oracle\product\10.2.0\Standbyy\oradata\DB2','C:\oracle\product\10.2.0\oradata\db1'
*.STANDBY_FILE_MANAGEMENT=AUTO
*.db_recovery_file_dest='C:\oracle\product\10.2.0/flash_recovery_area'
*.db_recovery_file_dest_size=2147483648
*.dispatchers='(PROTOCOL=TCP) (SERVICE=db1XDB)'
*.job_queue_processes=10
*.open_cursors=300
*.pga_aggregate_target=95420416
*.processes=150
*.recyclebin='OFF'
*.remote_login_passwordfile='EXCLUSIVE'
*.sga_target=287309824
*.undo_management='AUTO'
*.undo_tablespace='UNDOTBS1'
*.user_dump_dest='C:\oracle\product\10.2.0/admin/db1/udump'
*.utl_file_dir='OCM_CONFIG_HOME/state'
Here is the Pfile of standby database:
db1.__db_cache_size=188743680
db1.__java_pool_size=4194304
db1.__large_pool_size=4194304
db1.__shared_pool_size=83886080
db1.__streams_pool_size=0
*.audit_file_dest='C:\oracle\product\10.2.0\Standbyy\admin\db2\adump'
*.background_dump_dest='C:\oracle\product\10.2.0\Standbyy\admin\db2\bdump'
*.compatible='10.2.0.1.0'
*.control_files='C:\oracle\product\10.2.0\Standbyy\oradata\db2\control001.ctl','C:\oracle\product\10.2.0\Standbyy\oradata\db2\control002.ctl','C:\oracle\product\10.2.0\Standbyy\oradata\db2\control003.ctl'
*.core_dump_dest='C:\oracle\product\10.2.0\Standbyy\admin\db2'
*.db_16k_cache_size=4194304
*.db_block_size=8192
*.db_domain=''
*.db_file_multiblock_read_count=16
*.db_name='db1'
*.DB_UNIQUE_NAME='db2sby'
*.LOG_ARCHIVE_CONFIG='DG_CONFIG=(db1,db2sby)'
*.LOG_ARCHIVE_DEST_1='LOCATION=C:\oracle\product\10.2.0\ARCHIVELOG VALID_FOR=(ALL_LOGFILES,ALL_ROLES) DB_UNIQUE_NAME=db2sby'
*.LOG_ARCHIVE_DEST_2='SERVICE=db1 LGWR ASYNC VALID_FOR=(ONLINE_LOGFILES,PRIMARY_ROLE) DB_UNIQUE_NAME=db1'
*.LOG_ARCHIVE_DEST_STATE_1=ENABLE
*.LOG_ARCHIVE_DEST_STATE_2=ENABLE
*.LOG_ARCHIVE_FORMAT=%t_%s_%r.arc
*.LOG_ARCHIVE_MAX_PROCESSES=30
*.FAL_SERVER=db1
*.FAL_CLIENT=db2sby
*.DB_FILE_NAME_CONVERT='C:\oracle\product\10.2.0\Standbyy\oradata\DB2','C:\oracle\product\10.2.0\oradata\db1'
*.LOG_FILE_NAME_CONVERT='C:\oracle\product\10.2.0\Standbyy\oradata\DB2','C:\oracle\product\10.2.0\oradata\db1'
*.STANDBY_FILE_MANAGEMENT=AUTO
*.db_recovery_file_dest='C:\oracle\product\10.2.0\flash_recovery_area\DB2SBY'
*.db_recovery_file_dest_size=2147483648
*.dispatchers='(PROTOCOL=TCP) (SERVICE=db1XDB)'
*.job_queue_processes=10
*.open_cursors=300
*.pga_aggregate_target=95420416
*.processes=150
*.recyclebin='OFF'
*.remote_login_passwordfile='EXCLUSIVE'
*.sga_target=287309824
*.undo_management='AUTO'
*.undo_tablespace='UNDOTBS1'
*.user_dump_dest='C:\oracle\product\10.2.0\Standbyy\admin\db2\udump'
*.utl_file_dir='OCM_CONFIG_HOME/state'

ASA 5520: Configuring Active/Standby High Availability

Hi,
I am new to Cisco firewalls. We are moving from a different vendor to Cisco ASA 5520s.
I have two ASA 5520s running ASA 8.2(5). I am managing them with ASDM 6.4(5).
I am trying to setup Active/Standby using the High Availability Wizard. I have interfaces on each device setup with just an IP address and subnet mask. Primary is 10.1.70.1/24 and secondary is 10.1.70.2/24. The interfaces are connected to a switch and these interfaces are the only nodes on this switch. When I run the Wizard on the primary, configure for Active/Standby, enter the peer IP of 10.1.70.2 and I get an error message saying that the peer test failed, followed by an error saying ASDM is temporarily unable to connect to the firewall.
I tried this using a crossover cable to connect the interfaces directly with the same result.
Any ideas?
Thanks.
Dan

The command Varun is right.
Since you want to know a little bit more about this stuff, here goes a bit. Every interface will have a secondary IP and a Primary IP where the Active/Standby pair will exchange hello packes. If the hellos are not heard from mate, the the unit is delcare failed.
In case the primary is the one that gets an interface down, it will failover to the other unit, if it is the standby that has the problem, the active unit will declare the other Unit "standby failed). You will know that everything is alright when you do a show failover and the standby pair shows "Standby Ready".
For configuring it, just put a secondary IP on every interface to be monitored (If by any chance you dont have an available secondary IP for one of the interfaces you can avoid monitoring the given interface using the command no "monitor-interface nameif" where the nameif is the name of the interface without the secondary IP.
Then put the commands for failover and stateful link, the stateful link will copy the connections table (among other things) to avoid downtime while passing from One unit to another, This link should have at least the same speed as the regular data interfaces.
You can configure the failover link and the stateful link in just one interface, by just using the same name for the link, remember that this link will have a totally sepparate subnet from the ones already used in firewall.
This is the configuration
failover lan unit primary
failover lan interface failover gig0/3
failover link failover gig0/3
failover interface ip failover 10.1.0.1 255.255.255.0 standby 10.1.0.2
failover lan unit secondary
failover lan interface failover gig0/3
failover link failover gig0/3
failover interface ip failover 10.1.0.1 255.255.255.0 standby 10.1.0.2
Make sure that you can ping each other secondary/primary IP and then put the command
failover first on the primary and then on the secondary.
That would fine.
Let me know if you have further doubts.
Link for reference
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008080dfa7.shtml
Mike

FWSM 4.0: switch from active/standby to active/active failover mode

Similar Messages

Maybe you are looking for