全部博文(33)
2008年(33)
分类: 系统运维
2008-09-04 14:28:09
环境为:2台PIX 535做lan failover。E1做failover联接端口。
注意:通过交叉线互联.端口一定要用100full,不能用100auto
具体配置如下:
primary
no failover
interface ethernet1 100full
nameif ethernet1 intf5 security10
ip address intf5 192.168.101.1 255.255.255.252 //主备保持一致
failover ip address intf5 192.168.101.2 //主备保持一致
failover lan unit primary
failover lan interface intf5
failover lan key 12345678
failover lan enable
standby
no failover
interface ethernet1 100full
ip address intf5 192.168.101.1 255.255.255.252 //主备保持一致
failover ip address intf5 192.168.101.2 //主备保持一致
failover lan unit secondary
failover lan interface intf5
failover lan key 12345678
failover lan enable
failover