Installing Failover; Interface - Cisco PIX 520 - PIX Firewall 520 User Manual

Chapter 5 PIX 520

Installing Failover

To install a failover connection, perform the following steps:
This section only applies to PIX security appliance units with a "UR" (unrestricted) license.
Note
Power off both the primary and secondary units.
Step 1
Note
Locate the Failover cable (shown in
Step 2
appliance. The cable is labeled Primary on one end and Secondary on the other. Install the cable for the
PIX 520 as shown in
Figure 5-9
Connect the Primary end of the Failover cable to the first PIX security appliance unit, that is, the one
Step 3
you have already configured.
Connect the Secondary end of the Failover cable to the standby unit.
Step 4
Connect a power cord to the power connector on the rear panel of each unit, and the other end of each
Step 5
power cord to (preferably separate) power outlets.
If you are using Stateful Failover, use one of the following types of connections, that is appropriate for
Step 6
your system, between the dedicated interfaces on the PIX security appliance units:
•
•
•
78-15170-02
Both PIX security appliances must be the same model number, have at least as much RAM, have
the same Flash memory size, and be running the same software version.
Figure 5-9.
PIX 520 Failover Cable Connection
Primary end
100BaseTX half-duplex hub using straight Category 5 cables.
100BaseTX full duplex on a dedicated switch or dedicated VLAN of a switch.
All enabled interfaces must be connected between the active and standby units. Only configure the
active unit. On the PIX 520, you can access the console and determine which unit is active with the
show failover command in the
http://cisco.com/en/US/products/sw/secursw/ps2120/prod_command_reference_list.html.
Figure 5-9). This cable is shipped separately from the PIX security
F
A
I
L
O
V
E
R
Secondary end
command reference online at:
Cisco PIX Security Appliance Hardware Installation Guide
Installing Failover
F
A
I
L
O
V
E
R
5-7