Cisco PIX Failover 实验

Cisco PIX Failover 实验

Active/Standby 配置如下：

primary 配置：

interface Ethernet0

speed 100

nameif outside

security-level 0

ip address 172.31.0.1 255.255.255.0 standby 172.31.0.3

!

interface Ethernet1

speed 100

nameif inside

security-level 100

ip address 10.0.0.1 255.255.255.0 standby 10.0.0.3

!

interface Ethernet2

speed 100

nameif dmz security-level 50

ip address 192.168.1.1 255.255.255.0 standby 192.168.1.3

!

failover lan interface lanfail Ethernet3

failover key *****

failover interface ip lanfail 172.168.2.1 255.255.255.0 standby 172.168.2.3

failover lan unit primary

failover lan enable

failover

Secondary 配置：

failover lan interface lanfail Ethernet3

failover key *****

failover interface ip lanfail 172.168.2.1 255.255.255.0 standby 172.168.2.3

failover lan unit secondary

failover lan enable

failover

可以观看Cisco的在线视频：

http://www.cisco.com/E-Learning/bulk/public/celc/Cisco_QLM6_ASA_beta/course_skin.html

http://www.cisco.com/E-Learning/bulk/public/celc/Cisco_QLM10_ASA_beta/course_skin.html