Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 151)

100

101

11-19

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 11 Configuring Failover

Configuring Failover

Step 5 (Optional) To enable Stateful Failover, configure the state link. The state link must be configured on an

unused interface.

a. Specify the interface to be used as state link.

hostname(config)# failover link

if_name

phy_if

Note If the state link uses the failover link, then you only need to supply the if_name argument.

The if_name argument assigns a logical name to the interface specified by the phy_if argument. The

phy_if argument can be the physical port name, such as Ethernet1, or a previously created

subinterface, such as Ethernet0/2.3. This interface should not be used for any other purpose (except,

optionally, the failover link).

b. Assign an active and standby IP address to the state link.

Note If the state link uses the failover link, skip this step. You have already defined the failover

link active and standby IP addresses.

hostname(config)# failover interface ip

if_name ip_addr mask

standby

ip_addr

The standby IP address must be in the same subnet as the active IP address. You do not need to

identify the standby address subnet mask.

The state link IP address and MAC address do not change at failover. The active IP address always

stays with the primary unit, while the standby IP address stays with the secondary unit.

c. Enable the interface.

Note If the state link uses the failover link, skip this step. You have already enabled the failover

link.

hostname(config)# interface

phy_if

hostname(config-if)# no shutdown

Step 6 Enable failover.

hostname(config)# failover

Step 7 Save the system configuration to Flash memory.

hostname(config)# copy running-config startup-config

Configuring the Secondary Unit

The only configuration required on the secondary unit is for the failover interface. The secondary unit

requires these commands to initially communicate with the primary unit. After the primary unit sends

its configuration to the secondary unit, the only permanent difference between the two configurations is

the failover lan unit command, which identifies each unit as primary or secondary.

For multiple context mode, all steps are performed in the system execution space unless noted otherwise.

1 2 ... 146 147 148 149 150 151 152 153 154 155 156 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 151

Kommentare zu diesen Handbüchern