After you have created failover groups on a Security Appliance, you must assign virtual
context to each group. Using the join-failure-group command within the virtual context subcommand
mode, you can join context 1 to failover group 1, as shown in Example 12-2.
Configuring Failover
To configure failover, you need to become familiar with a few key commands. Table 12-4
shows the commands used to configure and verify failover.
Table 12-3 Failover Sub-Command Mode Commands
Primary Gives higher priority to the primary unit.
secondary Gives higher priority to the secondary unit.
Polltime Interface Specifies interface polling time.
preempt Allows preemption of lower priority active units.
replication http Enables an assigned failover group the ability to replicate over HTTP.
mac address Assigns a virtual MAC address for a physical interface.
show failover This popular command displays the status of the failover
configuration.
Example 12-2 Assigning a Context to a Failover Group
primary-pix (config)# context ctx1
primary-pix (config-ctx)# join-failover-group 1
NOTE All context changes in active-active mode must be done on the active context of
the failover group only