思科ASA防火墙基本配置之双击故障倒换配置

failover   开启故障倒换
failover lan unit primary  设置为主防火墙
failover lan interface failoverlan GigabitEthernet0/3  心跳端口
failover interface ip failoverlan 192.168.1.204 255.255.255.252 standby 192.168.1.205 心跳互联地址
failover link statefullink GigabitEthernet0/4
failover interface ip statefulline 192.168.1.222 255.255.255.252 standby 192.168.1.223
failover key cisco123

 

failover  开启故障倒换
failover lan unit secondary  备防火墙
failover lan interface failoverlan GigabitEthernet0/3  心跳端口
failover interface ip failoverlan 192.168.1.204 255.255.255.0 standby 192.168.1.205  心跳地址
failover link statefullink GigabitEthernet0/4
failover interface ip statefulline 192.168.1.222 255.255.255.252 standby 192.168.1.223
failover key cisco123

 

ASA防火墙端口捆绑
interface redundant1
member-interface gigabitethernet3/0
member-interface gigabitethernet4/0
nameif outside
security-level 0
ip address 192.168.1.1 255.255.255.0 standby   192.168.1.2 255.255.255.0
no shutdown

转载于:https://blog.51cto.com/luweidong/780598