Cisco PIX 525 Especificaciones descargar pdf (Pagina 159)

100

101

11-27

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 11 Configuring Failover

Configuring Failover

The following example assigns failover group 1 a primary preference and failover group 2 a secondary

preference:

hostname(config)# failover group 1

hostname(config-fover-group)# primary

hostname(config-fover-group)# exit

hostname(config)# failover group 2

hostname(config-fover-group)# secondary

hostname(config-fover-group)# exit

Step 4 Assign each user context to a failover group using the join-failover-group command in context

configuration mode.

Any unassigned contexts are automatically assigned to failover group 1. The admin context is always a

member of failover group 1.

Enter the following commands to assign each context to a failover group:

hostname(config)# context

context_name

hostname(config-context)# join-failover-group {1 | 2}

hostname(config-context)# exit

Step 5 Enable failover.

hostname(config)# failover

Configure the Secondary Unit

When configuring LAN-based Active/Active failover, you need to bootstrap the secondary unit to

recognize the failover link. This allows the secondary unit to communicate with and receive the running

configuration from the primary unit.

To bootstrap the secondary unit in an Active/Active failover configuration, perform the following steps:

Step 1 (PIX security appliance platform only) Enable LAN-based failover.

hostname(config)# failover lan enable

Step 2 Define the failover interface. Use the same settings as you used for the primary unit.

a. Specify the interface to be used as the failover interface.

hostname(config)# failover lan interface

if_name

phy_if

The if_name argument assigns a logical name to the interface specified by the phy_if argument. The

phy_if argument can be the physical port name, such as Ethernet1, or a previously created

subinterface, such as Ethernet0/2.3.

b. Assign the active and standby IP address to the failover link.

hostname(config)# failover interface ip

if_name ip_addr mask

standby

ip_addr

Note Enter this command exactly as you entered it on the primary unit when you configured the

failover interface.

The standby IP address must be in the same subnet as the active IP address. You do not need to

identify the standby address subnet mask.

1 2 ... 154 155 156 157 158 159 160 161 162 163 164 ... 603 604

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 159

Comentarios a estos manuales