Chapters and transcript times will be ready shortly. You can use the video’s Play control or open the MP4 below.
Chapters
Narration transcript
The English narration in this video. Select a time to watch that moment.
We will switch the active Cisco firewall and verify that traffic uses its replacement.
Two firewalls connect the inside and outside networks, with a separate failover link between them.
The primary unit is active, and the secondary unit is ready on standby.
The source can reach one destination, while the selected policy blocks its sibling address.
A standby address is available for management, but it must not act as a transit gateway.
Keep the source route pointed at the active address before requesting the switchover.
On the standby firewall, enter enable, then failover active to make this unit active.
Check both roles and the interface addresses again: the active address now belongs to the secondary unit.
Repeat both traffic checks: the permitted destination answers, and the selected deny remains enforced.
On the secondary unit, enter enable, then no failover active to return traffic to the ready primary.
Verify the roles and both traffic results again after returning the active role.
These checks demonstrate new packet forwarding after a manual switchover; established session replication needs separate verification.