Statefull failover can be doen if any interface on the PIX goes down. Each
interface needs to be able to talk to the other interface on the second pix.
So the inside on the primary has to be able to communicate with the inside
on the secondary, DMZ to DMZ etc. and for statefull fail there has to be one
dedicated ethernet port that simply connects the 2 pix's as well as the blue
serial cable that connects the 2 pix's together.
With statefull failover either all the interfaces need to be configured for
failover or none of them. You cannot selectively put intewrfaces in or out
of failover. It's the whole pix or not.
You can have up to 6 and maybe even 8 now configured on the pix in a
stateful failover with the 5.x code.
-----Original Message-----
From: mak [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 08, 2001 10:37 PM
To: [EMAIL PROTECTED]
Subject: PIX failover redundancy
Hi all,
I configure the two PIX with failover function. Is it once there is a
link (in, out or DMZ) connected to PIX is going down, then the failover
would be activated?
Is it I can only configure one instance for each interface (in, out and
DMZ) on one PIX? If so, why PIX 520 has six slots, if there are only
three interfaces to be activated?
Thanks
Regards,
mak
_________________________________
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
