配置PIX Failover(四)

　2008-12-18 12:18:53　来源：WEB开发网　闂傚倸鍊风欢姘缚瑜嶈灋闁圭虎鍠栫粻顖炴煥閻曞倹瀚�

闂傚倸鍊风粈渚€骞夐敓鐘插瀭闁汇垹鐏氬畷鏌ユ煙閹殿喖顣奸柛搴＄У閵囧嫰骞掗幋婵冨亾閻㈢ǹ纾婚柟鐐灱濡插牊绻涢崱妤冃℃繛宀婁簽缁辨捇宕掑鎵佹瀸闂佺懓鍤栭幏锟�

濠电姷鏁告慨顓㈠箯閸愵喖宸濇い鎾寸箘閹规洟姊绘笟鈧ḿ褍煤閵堝悿娲Ω閳轰胶鍔﹀銈嗗笂閼冲爼鍩婇弴銏＄厪闁搞儮鏅涙禒褏绱掓潏鈺佷槐闁轰焦鎹囬弫鎾绘晸閿燂拷闂傚倸鍊风欢姘缚瑜嶈灋闁圭虎鍠栫粻顖炴煥閻曞倹瀚�　　闂傚倸鍊烽懗鑸电仚缂備胶绮〃鍛村煝瀹ュ鍗抽柕蹇曞У閻庮剟姊虹紒妯哄闁圭⒈鍋嗛惀顏囶樄闁哄本娲樼换婵婄疀閺囩姷鐛ラ梻浣哄帶婢瑰﹥绂嶅⿰鍫氣偓鏃堝礃椤忎礁浜鹃柨婵嗛婢ь喖霉閻樻瑥瀚粻楣冩煕椤愩倕鏋庨柣蹇嬪劜閵囧嫰寮村Ο鍝勫Е濡炪們鍨洪悷鈺呭箖閳╁啯鍎熼柕鍥у簻閹凤拷

核心提示：例1 Failover 配置nameif ethernet0 outside security0nameif ethernet1 inside security100nameif ethernet2 failover security10nameif ethernet3 unused security20enable

例1 Failover 配置

　　nameif ethernet0 outside security0 　　nameif ethernet1 inside security100 　　nameif ethernet2 failover security10 　　nameif ethernet3 unused security20 　　enable password xxx encrypted 　　passwd xxx encrypted 　　hostname pixfirewall 　　fixup protocol ftp 21 　　fixup protocol http 80 　　fixup protocol smtp 25 　　fixup protocol h323 1720 　　fixup protocol rsh 514 　　fixup protocol sqlnet 1521 　　names 　　pager lines 20 　　no logging timestamp 　　no logging standby 　　logging console errors 　　no logging monitor 　　no logging buffered 　　no logging trap 　　logging facility 20 　　logging queue 512 　　interface ethernet0 10baset 　　interface ethernet1 10baset 　　interface ethernet2 100full 　　interface ethernet3 10baset 　　mtu outside 1500 　　mtu inside 1500 　　mtu failover 1500 　　mtu unused 1500 　　ip address outside 209.165.201.1 　　255.255.255.224 　　ip address inside 192.168.2.1 255.255.255.0 　　ip address failover 192.168.254.1 　　255.255.255.0 　　ip address unused 192.168.253.1 　　255.255.255.252 　　failover 　　failover ip address outside 209.165.201.2 　　failover ip address inside 192.168.2.2 　　failover ip address failover 192.168.254.2 　　failover ip address unused 192.168.253.2 　　failover link failover 　　arp timeout 14400 　　global (outside) 1 209.165.201.3 netmask 255.255.255.224 　　nat (inside) 1 0.0.0.0 0.0.0.0 0 0 　　static (inside,outside) 209.165.201.5 　　192.168.2.5 netmask 255.255.255.255 0 0 　　access-list acl_out permit tcp any 209.165.201.5 eq 80 　　access-list acl_out permit icmp any any 　　access-group acl_out in interface outside 　　access-list acl_ping permit icmp any any 　　access-group acl_ping in interface inside 　　no rip outside passive 　　no rip outside default 　　no rip inside passive 　　no rip inside default 　　no rip failover passive 　　no rip failover default 　　route outside 0 0 209.165.201.4 1 　　timeout xlate 3:00:00 　　timeout conn 1:00:00 half-closed 0:10:00 　　udp 0:02:00 rpc 0:10:00 h323 0:05:00 　　sip 0:30:00 sip_media 0:02:00 　　timeout uauth 0:05:00 absolute 　　aaa-server TACACS+ protocol tacacs+ 　　aaa-server RADIUS protocol radius 　　no snmp-server location 　　no snmp-server contact 　　snmp-server community public 　　no snmp-server enable traps 　　telnet timeout 5 　　terminal width 80