Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 144)

100

101

11-12

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 11 Configuring Failover

Understanding Failover

Table 11-2 shows the failover action for each failure event. For each failure event, the policy (whether

or not failover occurs), actions for the active failover group, and actions for the standby failover group

are given.

Determining Which Type of Failover to Use

The type of failover you choose depends upon your security appliance configuration and how you plan

to use the security appliances.

If you are running the security appliance in single mode, then you can only use Active/Standby failover.

Active/Active failover is only available to security appliances running in multiple context mode.

If you are running the security appliance in multiple context mode, then you can configure either

Active/Active failover or Active/Standby failover.

• To provide load balancing, use Active/Active failover.

• If you do not want to provide load balancing, use Active/Standby or Active/Active failover.

Table 11-2 Failover Behavior for Active/Active Failover

Failure Event Policy

Active Group

Action

Standby Group

Action Notes

A unit experiences a power or

software failure

Failover Become standby

Mark as failed

Become active

Mark active as

failed

When a unit in a failover pair fails,

any active failover groups on that

unit are marked as failed and

become active on the peer unit.

Interface failure on active failover

group above threshold

Failover Mark active

group as failed

Become active None.

Interface failure on standby failover

group above threshold

No failover No action Mark standby

group as failed

When the standby failover group is

marked as failed, then the active

failover group will not attempt to

fail over, even if the interface

failure threshold is surpassed.

Formerly active failover group

recovers

No failover No action No action Unless configured with the

preempt command, the failover

groups remain active on their

current unit.

Failover link failed at startup No failover Become active Become active If the failover link is down at

startup, both failover groups on

both units will become active.

State link failed No failover No action No action State information will become out

of date, and sessions will be

terminated if a failover occurs.

Failover link failed during operation No failover n/a n/a Each unit marks the failover

interface as failed. You should

restore the failover link as soon as

possible because the unit cannot fail

over to the standby unit while the

failover link is down.

1 2 ... 139 140 141 142 143 144 145 146 147 148 149 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 144

Kommentare zu diesen Handbüchern