Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 154)

11-22

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 11 Configuring Failover

Configuring Failover

Configuring Interface and Unit Poll Times

The security appliance monitors both unit and interface health for failover. You can configure the amount

of time between hello messages when monitoring interface and unit health. Decreasing the poll time

allows an interface or unit failure to be detected more quickly, but consumes more system resources.

To change the interface poll time, enter the following command in global configuration mode:

hostname(config)# failover polltime interface

seconds

To change the unit poll time, enter the following command in global configuration mode:

hostname(config)# failover polltime

seconds

Configuring Failover Criteria

By default, a single interface failure causes failover. You can specify a specific number of interfaces or

a percentage of monitored interfaces that must fail before a failover occurs.

To change the default failover criteria, enter the following command in global configuration mode:

hostname(config)# failover interface-policy

num

[%]

When specifying a specific number of interfaces, the num argument can be from 1 to 250. When

specifying a percentage of interfaces, the num argument can be from 1 to 100.

Configuring Virtual MAC Addresses

In Active/Standby failover, the MAC addresses for the primary unit are always associated with the active

IP addresses. If the secondary unit boots first and becomes active, it uses the burned-in MAC address for

its interfaces. When the primary unit comes online, the secondary unit obtains the MAC addresses from

the primary unit. The change can disrupt network traffic.

You can configure virtual MAC addresses for each interface to ensure that the secondary unit uses the

correct MAC addresses when it is the active unit, even if it comes online before the primary unit. If you

do not specify virtual MAC addresses, then the failover pair uses the burned-in NIC address as the MAC

address.

Note You cannot configure a virtual MAC address for the failover or state links. The MAC and IP addresses

for those links do not change during failover.

Enter the following command on the active unit to configure the virtual MAC addresses for an interface:

hostname(config)# failover mac address

phy_if

active_mac

standby_mac

The phy_if argument is the physical name of the interface, such as Ethernet1. The active_mac and

standby_mac arguments are MAC addresses in H.H.H format, where H is a 16-bit hexadecimal digit. For

example, the MAC address 00-0C-F1-42-4C-DE would be entered as 000C.F142.4CDE.

The active_mac address is associated with the active IP address for the interface, and the standby_mac

is associated with the standby IP address for the interface.

1 2 ... 149 150 151 152 153 154 155 156 157 158 159 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 154

Kommentare zu diesen Handbüchern