Installing Lan-Based Failover - Cisco PIX-525-UR-BUN - PIX 525 Unrestricted Bundle User Manual

Installing LAN-Based Failover

Installing LAN-Based Failover
LAN-based failover supports failover between two units connected over a dedicated Ethernet interface.
LAN-based failover eliminates the need for a special failover cable and overcomes the distance
limitations imposed by the failover cable.
Both PIX security appliances must be the same model number, have the same amount of RAM, Flash
Note
memory, number and type of interfaces, and be running the same software version.
To set up a LAN-based failover connection, perform the following steps:
Disconnect both PIX security appliance, so that there is no traffic flow between them. If the failover
Step 1
cable is connected to the PIX security appliance, disconnect it.
Configure the PIX security appliance for LAN-based failover. Refer to the chapter on configuring
Step 2
LAN-based failover in the configuration guide online at:
http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/config.html
Power off both units.
Step 3
Connect the LAN failover interfaces to the dedicated switch/hub, as shown in
Step 4
Note
Figure 6-7
Dedicated Ethernet
Cisco PIX Security Appliance Hardware Installation Guide
6-8
A dedicated LAN interface and a dedicated switch (or VLAN) is required to implement
LAN-based failover. You cannot use a crossover Ethernet cable to connect the two PIX security
appliances.
LAN- Based Failover Connections
100Mbps ACT
LINK 100Mbps ACT
10/100 ETHERNET 1
10/100 ETHERNET 0
interface
Hub/switch
PIX 525
F
A
I
L
O
V
E
R
LINK PIX-525
USB CONSOLE
Dedicated Ethernet
interface
Chapter 6
Figure 6-7.
PIX 525
F
A
I
L
O
V
E
R
100Mbps ACT
LINK 100Mbps ACT
LINK PIX-525
10/100 ETHERNET 1
10/100 ETHERNET 0
USB CONSOLE
PIX 525
78-15170-02