Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 158)

100

101

11-26

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 11 Configuring Failover

Configuring Failover

d. Specify the failover link active and standby IP addresses.

hostname(config)# failover interface ip

if_name ip_addr mask

standby

ip_addr

The standby IP address must be in the same subnet as the active IP address. You do not need to

identify the standby IP address subnet mask. The failover link IP address and MAC address do not

change at failover. The active IP address always stays with the primary unit, while the standby IP

address stays with the secondary unit.

Step 2 (Optional) To enable Stateful Failover, configure the state link. The state link must be configured on an

unused interface.

a. Specify the interface to be used as state link.

hostname(config)# failover link

if_name

phy_if

The if_name argument assigns a logical name to the interface specified by the phy_if argument. The

phy_if argument can be the physical port name, such as Ethernet1, or a previously created

subinterface, such as Ethernet0/2.3. This interface should not be used for any other purpose (except,

optionally, the failover link).

Note If the state link uses the failover link, then you only need to supply the if_name argument.

b. Assign an active and standby IP address to the state link.

Note If the state link uses the failover link, skip this step. You have already defined the failover

link active and standby IP addresses.

hostname(config)# failover interface ip

if_name ip_addr mask

standby

ip_addr

The standby IP address must be in the same subnet as the active IP address. You do not need to

identify the standby address subnet mask.

The state link IP address and MAC address do not change at failover. The active IP address always

stays with the primary unit, while the standby IP address stays with the secondary unit.

c. Enable the interface.

Note If the state link uses the failover link, skip this step. You have already enabled the failover

link.

hostname(config)# interface

phy_if

hostname(config-if)# no shutdown

Step 3 Configure the failover groups. You can have at most two failover groups. The failover group command

creates the specified failover group if it does not exist and enters the failover group configuration mode.

For each failover group, you need to specify whether the failover group has primary or secondary

preference using the primary or secondary command. You can assign the same preference to both

failover groups. For load balancing configurations, you should assign each failover group a different unit

preference.

1 2 ... 153 154 155 156 157 158 159 160 161 162 163 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 158

Kommentare zu diesen Handbüchern